webkid/cms

The README, MIT license, and matching repository make setup and ownership reasonably clear. However, the last release and repository push were in December 2017, with no recent commits and no security policy, so maintenance risk is substantial.

Latest 0.2.4

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in more than 8 years, and all 12 releases arrived during its initial short publishing period. This is strong evidence of abandonment risk despite the package not being deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with its last push being in December 2017. No provided signal shows compensating recent maintenance.

Maintainers

Registry publishing access is held by one maintainer, and the repository owner is an individual rather than an organization. Combined with the long period of inactivity, this leaves limited visible maintenance capacity.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these counts provide no visible community activity to offset the maintenance concerns.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.