Usable with caveats: the package is a small, clearly documented integration from an organization-owned repository, but it is very new and all recent work comes from one contributor. Consider it suitable for limited use, with maintenance continuity worth monitoring.
68%
Total Score
67
100
78
90
The package is only 84 days old and all three releases occurred within roughly 2 hours, so there is limited evidence of long-term maintenance or a settled release cadence.
One contributor made all eight commits in the last 3 months, creating a meaningful continuity risk. Organization ownership partly compensates because maintenance can potentially be handed off internally.
Eight commits were made in the last 3 months, showing recent implementation activity, but all activity came from one active maintainer.
The repository has zero stars, forks, and watchers, providing no community adoption or external review evidence. Popularity is supporting evidence rather than decisive for this small integration.
Composer is used as the build tool, but no security scanning tooling is present. This is a transparency gap, though the focused package and absence of workflows limit the practical risk indicated by this signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
google/apiclient Version ^2.19 | — | — |
refineddigital/cms Version ^1.36|dev-master | — | — |
refineddigital/cms-form-builder Version ^1.13|dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.