This is a generally usable and actively published package with a long history, a stable release, recent releases, an unarchived organization-owned repository, an explicit BSD-3-Clause license, and no install-time lifecycle scripts. However, maintenance capacity appears concentrated: the repository has only one recent commit from one contributor, the registry has one maintainer, and the repository has no tests, security policy, or security-scanning tooling. Its 14 runtime dependencies also increase dependency-chain exposure. The package is not evidently abandoned, but it merits caution and ongoing review before becoming a critical dependency.
68%
Total Score
63
50
83
83
The package declares 14 runtime dependencies and no development dependencies. This is a substantial dependency surface for a small package and increases transitive maintenance and compatibility exposure.
A README and changelog are present, and the repository uses GitHub Releases, but neither the artifact nor repository contains tests. For a package with configuration and application code, the absence of any observed tests is a genuine maintenance and regression risk.
All recent commits come from one contributor, creating a high concentration risk. The organization-owned repository provides some ability to hand maintenance off, which makes this a caution rather than a severe standalone risk.
Only 1 commit was recorded in the last 3 months from 1 active maintainer. Recent activity exists, but its very low volume suggests limited maintenance capacity.
There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is not evidence of abandonment by itself, but it provides little evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
skeeks/cms Version ^6.0 || dev-master | — | — |
skeeks/cms-job Version ^1.0 || dev-master | — | — |
skeeks/cms-mcp Version ^1.0 | — | — |
skeeks/cms-seo Version ^3.0 || dev-master | — | — |
skeeks/cms-mailer Version ^3.0 || dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.