springworks/craftcms
The project includes a substantial README, changelog, and clear Make/Composer tooling for its starter-project workflow. License metadata conflicts with the detected MIT license, and the repository has no security policy or scanning setup.
55%
Total Score
25
71
75
Health Score Breakdown
The package has 26 releases, but none in the last 12 months and its latest release was in September 2023, indicating prolonged release inactivity.
There were no commits and no active maintainers in the last three months, reinforcing the concern that maintenance has effectively stopped.
A license file is present and the repository also has one, but the manifest declares 0BSD while the artifact license file is detected as MIT; the mismatch reduces transparency.
The source repository is owned by an individual rather than an organization, so the registry namespace does not provide evidence of broader organizational maintenance capacity.
Make and Composer provide build and setup tooling, but no security scanning tools are configured, leaving a modest repository-hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.