Its BSD-3-Clause licensing, README, and changelog make the package straightforward to inspect. The broad 30-package runtime dependency set adds upgrade and compatibility burden.
60%
Total Score
33
50
86
50
The package has 29 releases since March 2015, but its latest registry release was in September 2023 and there were no releases in the last 12 months, indicating a long maintenance gap.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the repository not being archived.
The package declares 30 runtime dependencies, including many related modules, creating substantial transitive upgrade and compatibility burden for a test module.
The package runs post-install and post-update Composer scripts, which increases installation behavior and review surface, though this signal alone does not indicate unsafe maintenance.
Only one registry publishing maintainer is listed. That is a modest continuity risk for a user-owned project, especially alongside the lack of recent commit activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sunnysideup/geoip Version dev-master | — | — |
sunnysideup/ecommerce Version dev-master | — | — |
silverstripe/recipe-cms Version ^5.0 | — | — |
sunnysideup/payment_dps Version dev-master | — | — |
sunnysideup/cms-niceties Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.