58%
Total Score
caution
No releases or commits in the past year, with all workflow actions unpinned, keeps this otherwise licensed package in caution territory.
The package has 21 releases since April 2024, but none in the last 12 months; that extended release gap lowers confidence in ongoing maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with the lack of releases in the last year and raising abandonment concern.
Composer is used for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented.
The sole workflow was fully analyzed with no dangerous audit findings, but all 3 action references are unpinned; the absence of a top-level permissions block is acceptable on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^4.4|^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.