The stable major version and two listed maintainers are modest positives, but the package has little evidence of ongoing care. The repository could not be found, leaving maintenance and provenance unverified.
38%
Total Score
50
50
67
Only two releases were published, both on May 17, 2016, with none in the last 12 months; after about 10 years, this is strong abandonment evidence.
Five runtime dependencies, including the PHP runtime and several SallyCMS components, create meaningful dependency maintenance exposure for an otherwise dormant package.
Two registry accounts have publishing access, which provides some continuity, but access records do not demonstrate active maintenance or recent work.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sallycms/console Version >=0.9,<0.11 | — | — |
sallycms/sallycms Version >=0.9,<0.11 | — | — |
kriswallsmith/assetic Version 1.1.1 | — | — |
sallycms/composer-installer Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.