Package Health

skeeks/cms-basic

This is a generally usable and actively published package with a long history, a stable release, recent releases, an unarchived organization-owned repository, an explicit BSD-3-Clause license, and no install-time lifecycle scripts. However, maintenance capacity appears concentrated: the repository has only one recent commit from one contributor, the registry has one maintainer, and the repository has no tests, security policy, or security-scanning tooling. Its 14 runtime dependencies also increase dependency-chain exposure. The package is not evidently abandoned, but it merits caution and ongoing review before becoming a critical dependency.

Latest 2.1.2PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Dependency profilecaution

The package declares 14 runtime dependencies and no development dependencies. This is a substantial dependency surface for a small package and increases transitive maintenance and compatibility exposure.

Package scaffoldingcaution

A README and changelog are present, and the repository uses GitHub Releases, but neither the artifact nor repository contains tests. For a package with configuration and application code, the absence of any observed tests is a genuine maintenance and regression risk.

Repo bus factorcaution

All recent commits come from one contributor, creating a high concentration risk. The organization-owned repository provides some ability to hand maintenance off, which makes this a caution rather than a severe standalone risk.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months from 1 active maintainer. Recent activity exists, but its very low volume suggests limited maintenance capacity.

Repo issue activitycaution

There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is not evidence of abandonment by itself, but it provides little evidence of active community maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Semenov Alexander

Direct Dependencies

DependencyLast ReleaseScore
skeeks/cms
Version ^6.0 || dev-master
—
—
skeeks/cms-job
Version ^1.0 || dev-master
—
—
skeeks/cms-mcp
Version ^1.0
—
—
skeeks/cms-seo
Version ^3.0 || dev-master
—
—
skeeks/cms-mailer
Version ^3.0 || dev-master
—
—

Weekly Downloads

Info

Last Published
17 days ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform