Maintenance has effectively stopped: the last release was over 10 years ago and the repository has not been pushed to since 2016. The package is clearly licensed, but that does not offset its abandoned status.
12%
Total Score
30
The registry marks the entire package as abandoned and names heyday/silverstripe-imageextension as its replacement. This is a severe adoption risk because new dependents should migrate to the successor instead.
The latest release was published in August 2015, with no releases in the last 12 months. A release gap of over 10 years strongly indicates abandonment for a dependency.
The repository is not formally archived, but its last push was in March 2016, more than 10 years ago. That lack of recent source activity provides no meaningful maintenance reassurance.
The package includes a README, and it explicitly warns that the module is deprecated and recommends silverstripe-imageextension. The absence of tests and a changelog is normal for a published artifact and is not counted against it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version 3.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.