Healthy and reasonable to use, with a small maintenance caveat. It has a long release history, a current stable release, matching source repository, tests, and organizational backing; activity and security documentation remain limited.
80%
Total Score
60
50
89
90
Four runtime dependencies create some dependency-chain exposure, but the profile is finite and appropriate for a CMS database-dumping extension.
Only one registry account has publish access, which is a modest publishing-resilience concern. The organization-owned repository provides some compensation, but does not eliminate reliance on that publisher.
All one recent commit came from a single contributor, creating concentration risk. Organization ownership offers some handoff capacity, so this is a caution rather than a severe risk.
The repository recorded one commit in the last three months from one active maintainer. Recent publishing and the current push compensate partly, but ongoing engineering activity is thin.
There is only one open issue, with no new or closed issues or pull requests in the last month. This does not show abandonment, but provides little evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
skeeks/cms Version ^6.0 || dev-master | — | — |
skeeks/cms-job Version ^1.0.6 || dev-master | — | — |
skeeks/cms-agent Version ^3.2.4 || dev-master | — | — |
ifsnop/mysqldump-php Version ^2.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.