SkeekS CMS basic shop package
68%
Total Score
70
50
83
90
The package declares 33 runtime dependencies and no development dependencies. This broad dependency surface increases transitive maintenance and compatibility risk, particularly without visible development-test dependencies.
A changelog is present in both the artifact and repository, and the repository uses GitHub Releases, but neither contains tests and the README is only 16 characters long. The changelog and release evidence compensate for part of the documentation gap, while the absent tests remain a maintenance-quality concern.
All recent commits come from one contributor with a 100% share. Organization backing partially mitigates the handoff risk, but no second active contributor is shown, so the concentration remains a caution.
The repository had only 1 commit in the last 3 months from 1 active maintainer. Recent registry releases show the project is not abandoned, but the very low observed repository activity indicates limited maintenance capacity.
There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is not inherently unhealthy for a small stable package, but it provides little evidence of an active user or review community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
skeeks/cms Version ^6.4 || dev-master | — | — |
skeeks/cms-job Version ^1.0 || dev-master | — | — |
skeeks/cms-mcp Version ^1.0 | — | — |
skeeks/cms-seo Version ^3.0 || dev-master | — | — |
skeeks/cms-shop Version ^3.0 || dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.