Clear licensing, a usable README, and a changelog support adoption. However, no registry releases in over three years and no commits in the last three months make maintenance uncertain; no security policy is a smaller transparency gap.
58%
Total Score
50
100
92
50
The package has had no release in over three years, with zero releases in the last 12 months. That is a meaningful maintenance concern despite four total releases.
There were zero commits and zero active maintainers in the last three months. Combined with the long release gap, this lowers confidence that maintenance is active.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented. This is a transparency weakness, but not severe on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version ^4.0 || ^5.0 | — | — |
sunnysideup/youtubefield Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.