Subresource integrity hashing & cache-busting static assets for Kirby
12%
Total Score
critical
Unfit to use: the package is deprecated and its source repository is archived.
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because future maintenance and support are not indicated.
The latest release was published in March 2018, about 8 years ago, and there have been no releases in the last 12 months. This indicates prolonged abandonment rather than a recent stable release cycle.
The repository recorded no commits and no active maintainers in the last 3 months. Combined with its archived status, this confirms that current maintenance activity is absent.
The linked repository is archived and was last pushed about 5 years ago. Archived source is a strong indicator that fixes and compatibility updates are unlikely.
The repository has no security policy. This is a modest transparency gap, though the clear identity and licensing do not offset the more serious maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.