Tests are included, dependencies are limited, and installation runs no lifecycle scripts. The repository has little visible security and workflow hardening, so pin this version and monitor maintenance closely.
62%
Total Score
50
100
81
67
All 12 releases appeared within the same day, with a median interval of about 11 minutes. This shows active initial publishing but not an established release record.
There were no commits and no active maintainers in the last three months. The repository's same-day push and release burst provide some context, but do not establish sustained maintenance.
The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, though low popularity alone is not a decisive concern for a small addon.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.