The BSD license, documentation, tests, changelog, and clean installation profile provide useful transparency. Maintenance has effectively stopped, with no recent commits, releases, or issue progress, so future compatibility is a substantial concern.
42%
Total Score
33
100
75
88
Although the package had nine releases and a median interval of about 57 days, its latest release was over eight years ago and it had no releases in the last 12 months.
The repository has zero commits and zero active maintainers in the last three months, providing strong evidence that maintenance has stopped.
The registry namespace and repository owner match, and the repository is owned by a user account rather than an organization; this provides ownership continuity but limited evidence of maintenance capacity.
There are no new or closed issues or pull requests in the last month, and four pull requests remain open, consistent with stalled project activity.
Composer is used for the build, but no security scanning tools are configured; this is a modest transparency gap, though the package's more serious concern is its inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ~2.4 | — | — |
silverstripe/framework Version ~2.4 | — | — |
silverstripe/googlemap Version * | — | — |
silverstripe/geobrowser Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.