The package has a clear BSD-3-Clause license, a matching source repository, and a small runtime dependency surface. Organization backing and release notes help, but the absent security tooling, tiny community, and inactive recent development leave maintenance coverage thin.
61%
Total Score
75
100
81
75
The package has 12 releases since September 2021, but none in the last 12 months and its latest release was in December 2024. This indicates a meaningful maintenance slowdown for a package with a current release line.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release provides some counter-evidence, but current development activity is absent.
The repository has 1 star, 0 forks, and 1 watcher, offering little external adoption or review evidence. Low popularity is supporting evidence rather than a standalone abandonment verdict.
Composer build tooling is present, but no security-scanning tools are configured. This is a transparency and maintenance gap, though it is not severe by itself.
The repository has no security policy. For a payment-system integration, that reduces clarity about reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
skeeks/cms-shop Version ^3.0 || dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.