Usable with caveats: this is a clearly documented, licensed first release from a matching organization-backed repository, but it has no track record yet. There are no tests or security policy, and maintenance activity cannot be established from a package released only hours ago.
62%
Total Score
75
100
89
88
This is the only release and was published within the last day, so the package has no demonstrated release track record or evidence of sustained maintenance yet.
There are zero commits and zero active maintainers in the measured three-month window. Because the repository and release are brand new, this is more a lack of maintenance evidence than proof of abandonment.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
No repository security policy was found, reducing disclosure transparency for a package that affects rendered page caching, though this is not by itself evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silverstripe/cms Version ^5 || ^6 | — | — |
silverstripe/framework Version ^5 || ^6 | — | — |
silverstripe/versioned Version ^2 || ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.