rodrigowerlin/cmsgoon
The small PHP surface and single runtime dependency keep adoption simple. The published Apache-2.0 claim conflicts with the detected MIT license file, adding a legal check before adoption.
44%
Total Score
50
100
79
83
Health Score Breakdown
The manifest declares Apache-2.0, but the artifact contains a detected MIT license file under vendor/composer; the mismatch needs resolution before adoption.
The package has had no release in nearly seven years, despite 33 releases historically; this is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited maintenance capacity.
The repository has zero stars and forks and only two watchers, providing little supporting evidence of active community use; this is secondary to the maintenance gap.
The repository has no security policy or security scanning tools. This is a hygiene gap, though the small package and absence of active workflows limit its weight.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rodrigo werlin |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.