sallycms/assets
The MIT license and matching source tree make the package easy to identify and audit. Four runtime dependencies and no security policy add upkeep work, while the long-standing lack of project activity makes adoption a liability.
35%
Total Score
75
50
80
75
Health Score Breakdown
The package declares four runtime dependencies, including the PHP runtime, lessphp, SallyCMS core, and a Composer installer. This is a manageable but nontrivial dependency surface for an unmaintained package.
The artifact and repository contain no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a minor consumer-documentation gap for this library.
The latest release was in March 2016, with no releases in the last 12 months and only three releases overall. This strongly indicates abandonment risk for a package being assessed in 2026.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and showing no current maintenance capacity.
The repository has no security policy. This is a modest transparency and maintenance gap, particularly when there is no recent activity to show how vulnerabilities would be handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 webvariants GmbH & Co. KG |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 leafo/lessphp Version >=0.3,<0.5 | — | — |
sallycms/core Version 0.10.* | — | — |
sallycms/composer-installer Version ~1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.