This release is usable but not yet demonstrably mature. It has a clear BSD-3-Clause license, a matching source repository, repository tests and documentation, no install lifecycle scripts, no deprecation notice, and a small, understandable dependency profile. However, it is only 0 days old with one release, and the repository records 0 commits and 0 active maintainers over the last 3 months, so maintenance continuity cannot yet be established. The absence of security scanning and a security policy also reduces transparency, although there are no GitHub Actions workflows exposing dangerous workflow or token-permission patterns.
68%
Total Score
50
100
89
90
Two registry accounts have publish access, including Symbiote and Andrew Short. This is some publishing continuity, but registry access does not establish that these maintainers are actively maintaining the project.
The repository is owned by the user account sunnysideup rather than an organization, so the small publisher base offers limited backing evidence; this is partly offset by the matching repository and package identity.
This is a newly published package with one release and an age of 0 days, so there is no historical release cadence or demonstrated maintenance track record yet.
The repository records 0 commits and 0 active maintainers over the last 3 months. Because the package is newly observed, this may reflect its very recent publication, but maintenance capacity is currently unproven.
There were no new issues or pull requests in the last month and no merged pull requests; with a package age of 0 days, this is insufficient to establish abandonment but provides no evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.