The package has a stable major version, no install-time scripts, and a small runtime dependency set. Its short history, concentrated contributor activity, proprietary license, limited documentation, and unpinned workflow action leave meaningful adoption concerns.
58%
Total Score
50
100
71
75
The release declares a proprietary license, so it is licensed but may impose restrictions that complicate use and redistribution in dependent projects.
The artifact has no README, while absent tests and changelog are normal packaging gaps for this kind of addon; the missing consumer documentation still reduces transparency.
Seven releases in 87 days show active early development, but the package has a short track record and limited evidence of long-term maintenance.
Two contributors are active, but one accounts for 80% of recent commits, leaving maintenance meaningfully concentrated.
Five commits from two active maintainers in the last three months show recent work, but the small activity volume provides limited evidence of sustained maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
statamic-addon/popup Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.