Package Health

tobimori/kirby-seo

Recent releases and documented beta fixes show an active project, but the beta status and single-contributor maintenance model add adoption risk. GitHub Actions also use six unpinned actions, although the audit found no untrusted checkouts or script injection.

Latest 2.0.0-beta.5PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Maintainerscaution

Only one registry account has publishing access, which is a modest operational concentration risk for a user-owned project.

Project backingcaution

The registry and repository are owned by the same individual account, confirming package ownership but providing no organization-level maintenance backing.

Repo bus factorcaution

One contributor made all six recent commits, leaving no demonstrated handoff capacity and increasing abandonment risk if that maintainer becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and checking gap.

Security policycaution

The repository has no security policy, so it gives maintainers and users no documented process for handling vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tobias Möritz

Direct Dependencies

DependencyLast ReleaseScore
getkirby/composer-installer
Version ^1.2.1

Weekly Downloads

Info

Last Published
1 month ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform