It has a clear README, changelog, repository tests, a BSD-3-Clause license, and no install-time scripts. Its small dependency set lowers integration risk, but compatibility with the current Silverstripe stack should be checked carefully.
43%
Total Score
25
100
75
75
The package has had no registry release in more than eight years, despite eight releases overall and a previously regular cadence. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided maintenance signal compensates for this.
There are four open pull requests, with no new or merged pull requests in the last month. This suggests unresolved maintenance work, though the absence of open issues limits the concern.
The repository has one star, one fork, and one watcher. Low popularity is only supporting evidence, but it provides little external evidence of sustained use or review.
Composer build tooling is present, but no security scanning tools are configured. This is a transparency and maintenance gap, not evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ~3.6 | — | — |
sunnysideup/ecommerce Version * | — | — |
silverstripe/framework Version ~3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.