skeeks/cms-user-subscribe
Consumer documentation, licensing, and a compact artifact make the package straightforward to inspect and integrate. Its simple dependency profile and organization-backed repository help, but the project shows too little recent maintenance capacity for a low-risk dependency.
44%
Total Score
50
100
75
83
Health Score Breakdown
The latest release was about seven years ago, with four releases clustered on the same day and none in the last 12 months. This is strong evidence of stalled maintenance, although the package is not deprecated.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the long release gap and indicating no current maintenance activity.
The repository has zero stars and one fork, providing little supporting evidence of external adoption or review. Popularity is only supporting evidence, so this is a moderate concern rather than a decisive risk.
Composer is used for builds, but no security-scanning tooling is present. The missing scanner is a hygiene gap, not evidence that the package is unsafe.
The repository has no security policy. For a small, inactive package this reduces transparency around vulnerability reporting and response expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Semenov Alexander |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 skeeks/cms Version ^5.0 || dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.