The default setup application for SallyCMS projects
38%
Total Score
unhealthy
Risky: no releases since May 2016 and no recent repository activity.
The latest registry release was in May 2016, with zero releases in the last 12 months. That long gap is strong evidence of abandonment risk for a package developers may need to maintain around.
The repository recorded zero commits and zero active maintainers in the last 3 months. This confirms that the long release gap reflects inactivity rather than registry-only publishing behavior.
The package contains no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a minor transparency and integration gap for this setup application.
The assessed release is not marked prerelease, but the registry reports latest version v0.9.2 while the assessed release is v0.10.1, making version metadata inconsistent and reducing confidence in current release tracking.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sallycms/core Version 0.10.* | — | — |
sallycms/composer-installer Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.