AI-powered chat agent plugin for Craft CMS with knowledge base, tool calling, and customizable widget
64%
Total Score
caution
Usable with caveats: very new package with all 43 recent commits from one contributor.
The package is only 47 days old, with five releases all landing on the same day and no later registry release. That provides too little history to establish durable maintenance.
One contributor made all 43 commits in the last three months. Organization ownership provides some handoff capacity, but there is still no demonstrated second active contributor.
Composer build tooling is present, but no security-scanning tools were detected. For an AI-enabled CMS plugin handling uploads and web requests, that leaves a meaningful maintenance safeguard gap.
The repository has no security policy. This weakens vulnerability-reporting transparency for a plugin that exposes chat, uploads, and webhook-related functionality.
Version 0.4.0 is not marked as a prerelease, but the 0.x major version signals an early compatibility stage. This is a modest adoption concern rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^5.0 | — | — |
smalot/pdfparser Version ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
phpoffice/phpword Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.