It has a clear BSD-3-Clause license, a minimal dependency surface, and organization backing that provide some transparency and ownership context. The 29-character README gives consumers little integration guidance, and no security scanning was found.
43%
Total Score
50
67
100
This package has only one release, published in March 2021, with no releases in the last 12 months. The long period without a new release is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package having received no updates since March 2021. Its non-archived status does not compensate for the absent activity.
The package includes a README, but it is only 29 characters long and offers little usage guidance. The absence of tests and a changelog is normal for published package artifacts and is not penalized here.
Composer build tooling is present, but no security scanning tools were found. This is a moderate transparency and maintenance gap, though it is less significant than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
skeeks/cms Version ^5.0 || dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.