The codebase is compact and organization-backed, with a declared MIT license and no install scripts. Its one-person publishing base, absent README and security policy, and no recent commits leave limited evidence of ongoing support.
58%
Total Score
67
75
83
Only one registry publishing account is listed, which creates publishing bus-factor risk; the organization-owned repository provides some compensating project backing.
The artifact and linked repository contain no README, tests, or changelog. Missing tests and changelog are normal for a published artifact, but the absent README reduces integration transparency for this package.
The package has 8 releases since May 2020, but none in the last 12 months; the latest release was about 18 months ago, which weakens evidence of active maintenance.
There were no commits and no active maintainers in the last 3 months. Combined with no releases in the last 12 months, this is meaningful evidence of slowed maintenance.
The repository name does not match the package name, and no README mention was found. Although this may be a naming variation, ownership of the exact package is less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
refineddigital/cms Version ^1.22|dev-master | — | — |
drewm/mailchimp-api Version ^2.5 | — | — |
spatie/laravel-newsletter Version ^5.2 | — | — |
refineddigital/cms-form-builder Version ^1.10|dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.