Proof of Concept of a simple Digital Asset Management built on top of the Event Sourced Content Repository
45%
Total Score
unhealthy
Risky: two years without releases or commits, and the project is still labeled a proof of concept.
The package has only three releases, with the latest about two years ago and no releases in the last 12 months. This indicates a meaningful maintenance and abandonment risk.
The repository recorded no commits and no active maintainers in the last three months, consistent with the roughly two-year release gap. This materially raises the risk that defects or compatibility issues will remain unresolved.
A README and release notes are positive transparency signals, but the README identifies the package as a proof of concept and says it is not yet prepared to be installed on its own. No tests are expected in the published artifact, so their absence is not itself a gap.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence of an unsafe release.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a maintenance and transparency weakness, though not severe on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.4 | — | — |
neos/contentrepository-core Version 9.0.0-beta13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.