The MIT license and matching source repository provide useful transparency. The large runtime dependency set and absent security policy add maintenance and review overhead.
38%
Total Score
50
50
75
50
The package has 15 releases since February 2020, but none in the last five years; its latest release was in January 2021, indicating prolonged release inactivity.
The repository recorded no commits and no active maintainers in the last three months, consistent with the multi-year gap since the latest release.
The project declares 17 runtime dependencies, creating substantial upgrade and compatibility surface for an apparently inactive release.
The package defines four install and update lifecycle scripts, which increase installation complexity and the amount of package code executed automatically.
The repository has zero stars and forks and only one watcher, so there is little visible community adoption to compensate for the inactive maintenance record.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ether/seo Version ^3.5.4 | — | — |
wrav/oembed Version ^1.1.4 | — | — |
craftcms/cms Version ^3.6.0 | — | — |
vlucas/phpdotenv Version ^3.4.0 | — | — |
craftcms/redactor Version ^2.3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.