The package has seen no release or repository activity for more than five years, and its small source tree has no tests, changelog, or README. Organization backing and a declared MIT license help, but they do not offset the abandonment risk.
35%
Total Score
50
100
61
67
The latest release was on July 5, 2021, and there have been no releases in the last 12 months. That long release gap is strong evidence of abandonment for a dependency.
There were zero commits and zero active maintainers in the last three months, consistent with the multi-year release gap and indicating no current maintenance capacity.
The 15-file tree is a small, focused PHP module with source, configuration, migration, and provider files. Its narrow scope is not itself a concern, but it offers little supporting project material.
The package has no README, tests, or changelog, and the repository also reports no tests or changelog. While tests and changelogs need not ship in a package artifact, their absence in the repository and the missing consumer documentation reduce transparency.
The repository name does not exactly match the package name, but that can be normal for a subpackage and the project-backing signal links it to the same organization context. No README mention was available, so this is not enough to establish a mismatch.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
refineddigital/cms Version ^1.7|dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.