Healthy with caveats: the package has a current stable release, a long release history, matching organization-backed source repository, and documented tests and changelog. Its small audience, single recent contributor, and lack of a security policy warrant some caution.
76%
Total Score
75
100
89
90
The repository recorded 1 commit in the last 3 months from 1 active maintainer. The recent activity is positive, but the volume is thin and should be monitored.
There are no open issues or pull requests and no recent issue or pull-request activity. This is not negative by itself, but it provides little evidence of community review or responsiveness.
The repository has 1 star, 0 forks, and 1 watcher, indicating very limited independent adoption. Popularity is only supporting evidence, so this lowers confidence in broad community validation rather than making the package unfit.
Composer is used for builds, but no security-scanning tools are configured. That is a transparency and maintenance gap, though it is moderated by the recent release and repository activity.
The repository has no security policy. For a money and currency package, the absence of a documented vulnerability-reporting path is a genuine transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
skeeks/cms-job Version ^1.0.6 || dev-master | — | — |
skeeks/cms-agent Version ^3.2.4 || dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.