Adds stock management to SilverShop.
70%
Total Score
caution
Usable with caveats: a license mismatch and single-contributor recent activity temper an otherwise active, organization-backed release.
The artifact declares BSD-3-Clause, but its LICENSE file was detected as BSD-2-Clause; although a license is present, the mismatch creates avoidable legal ambiguity.
The package has existed since 2016 and released version 6.0.0 recently, but only one release occurred in the last 12 months, indicating a relatively slow cadence.
All two recent commits came from one contributor, creating a narrow operational handoff path. Organization backing partly compensates because maintenance can be transferred within the project.
Only two commits were recorded in the last three months, with one active maintainer, so current maintenance activity is real but limited.
The project uses Composer, but no security-scanning tooling was detected, leaving a modest supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silvershop/core Version ^6 | — | — |
silverstripe/framework Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.