Transform Pushword in a FlatFile CMS.
72%
Total Score
caution
Frequent releases and recent commits are encouraging, but all recent work comes from one contributor and no security controls are reported.
The package has 1,355 releases in about 9 months, with releases continuing through the assessed version. The zero-day median interval suggests an unusually automated or highly granular release process, so this is a mild transparency concern rather than evidence of abandonment.
One contributor made all 54 commits in the last 3 months. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving a genuine maintainer-depth concern.
Composer is used as the build tool, but no security-scanning tools are reported. The missing scanning is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy. For a package containing API controllers and token-validation code, this reduces transparency around vulnerability reporting and maintenance practices.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^9.0 | — | — |
pushword/core Version * | — | — |
spatie/yaml-front-matter Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.