The module is documented, licensed, and backed by an organization, with tests in the repository. Its dependency surface is small, but the release metadata is inconsistent.
48%
Total Score
50
100
75
75
The package has had no registry release in about 7 years, despite only five releases overall. This long period without a release materially increases abandonment risk.
The repository recorded zero commits and zero active maintainers in the past 3 months, reinforcing the concern that maintenance has stopped.
The repository has no security policy. This is a transparency gap, although the package's small scope and other project documentation partly reduce its significance.
The assessed version is 2.0.0, while the registry reports 1.0.3 as the latest version; that inconsistency reduces confidence in release metadata and upgrade expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.