The artifact includes tests, a changelog, and a readable package README, with no install-time scripts. The single registry maintainer and absent security policy leave limited redundancy and formal disclosure.
68%
Total Score
50
86
75
The package declares BSD-3-Clause, but the only detected license is MIT in the bundled third-party Awesomplete directory; that mismatch reduces licensing transparency and merits checking before adoption.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning even though the registry shows recent releases.
The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent and may indicate the source repository is not specifically for this package.
The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wamania/php-stemmer Version ^4 | — | — |
silverstripe/recipe-cms Version ^6 | — | — |
silverstripe/textextraction Version ^5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.