The package includes a README, tests, a stable release, and a matching source repository. Its single-user project has had no commits or releases for over eight years, while 29 issues and 6 pull requests remain open; the license files also conflict with the manifest.
42%
Total Score
38
100
78
88
The package has 20 releases, but none in the last 12 months and the latest release was over eight years ago. This indicates prolonged abandonment risk despite a previously regular release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the latest push being over eight years ago and indicating severe abandonment risk.
A BSD-3-Clause manifest declaration and a detected GPL-2.0 license file conflict, creating uncertainty about the terms governing this release even though license files are present.
One registry maintainer is consistent with the linked repository being owned by the same individual, but it leaves little visible publishing redundancy.
The package and repository are owned by the same individual account rather than an organization, so the single-maintainer context is not offset by visible organizational backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version >= 3.1.0 | — | — |
unclecheese/dropzone Version ^1.4 | — | — |
silverstripe/framework Version >= 3.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.