The README explicitly says it is not production ready, while the repository contains tests and the package declares a BSD license. Its tiny footprint and absent security tooling add little assurance.
34%
Total Score
25
69
75
The latest release was published in March 2016, and there have been no releases in the last 12 months. Five releases arrived within about two weeks, but the subsequent decade without releases indicates severe abandonment risk.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with its last push in March 2016. This leaves no evidence of ongoing maintenance.
The package includes a readable README, and the source repository contains tests, which improve transparency despite the artifact lacking tests and a changelog. The README also states that the project is not production ready.
There were no new or closed issues and no pull-request activity in the last month. With no recent releases or commits, the lack of project activity reinforces the maintenance concern.
The repository has 1 star, 1 fork, and 2 watchers. Popularity is not required for a healthy package, but this very small user base provides little supporting evidence or community resilience.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ~3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.