The repository has been inactive for about one year after a burst of releases, and it has no security policy or automated security scanning. Clear licensing, a matching source repository, and organization backing provide useful transparency.
60%
Total Score
75
100
90
75
The package has five releases, but all arrived within roughly four days and there have been no releases in the last 12 months despite the package being about one year old. That pattern suggests limited ongoing maintenance capacity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. No provided activity signal compensates for this maintenance concern.
The repository has no security policy, leaving no documented channel or process for reporting security issues. This is a transparency and response-readiness gap, though not severe on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/framework Version ^6.0 | — | — |
espresso-dev/instagram-php Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.