The package includes a substantial README and changelog, a matching source repository, and only two runtime dependencies. Maintenance has paused for three months, while the declared BSD-3-Clause license differs from the detected MIT license; verify licensing before adoption.
63%
Total Score
75
83
50
A BSD-3-Clause license is declared, but the artifact's detected MIT license does not match it. The release is licensed, but the mismatch requires clarification.
The repository had no commits and no active maintainers during the last three months, indicating a recent pause in development and raising abandonment risk.
The repository uses Composer, but no security scanning tools were detected. This is a transparency and maintenance gap, though it is not severe on its own.
The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jonom/focuspoint Version ^4 || ^5 | — | — |
restruct/silverstripe-simpler Version ~0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.