Clear documentation, licensing, tests in the repository, and a small dependency surface help with adoption. However, the last release and repository push were in May 2018, with no commits or active maintainers in the past three months; security scanning is also absent.
45%
Total Score
38
100
78
88
The package has had no release in more than eight years, despite eight releases overall; this is strong evidence of abandonment risk for a dependency.
There were no commits and no active maintainers in the past three months, consistent with the release history and indicating a seriously inactive project.
Only one registry account has publish access. This is a thin publishing base, and the repository is user-owned rather than organization-backed, so it offers limited redundancy if the maintainer stops work.
The repository is owned by the same user namespace as the registry package, but the owner type is User rather than Organization, providing limited visible project backing.
There were no new or closed issues or pull requests in the past month. With no recent commits, this supports inactivity rather than showing active issue resolution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ~3.6 | — | — |
silverstripe/tagfield Version 1.3.2 | — | — |
silverstripe/framework Version ~3.6 | — | — |
koala-framework/composer-extra-assets Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.