Risky to adopt: the project says it is retired and has had no release in nearly two years, with no recent commit activity. It remains licensed, transparently packaged, and backed by a matching organization, but future compatibility and maintenance are uncertain.
45%
Total Score
50
100
80
75
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the retirement and abandonment risk despite its earlier release history.
The package includes a substantial README, changelog, and release notes for version 2.2.2, which supports transparency. However, the README explicitly states that MatrixMate is retired and will not be available for Craft 5, a significant adoption concern.
The package has a mature history with 37 releases since 2019, but it has had no releases in the last 12 months and the latest release is from October 2024, nearly two years before collection.
The repository has no published security policy. This is a transparency gap, although the package is retired and there are no collected workflow risks to amplify it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.