Its long history and 353 releases provide useful maturity evidence, but the declared GPL-2.0+ differs from the GPL-2.0 license detected in the artifact. The package includes a README, has no install scripts, and depends on six runtime packages; current maintenance activity is not verifiable.
62%
Total Score
100
75
100
A license file is present, but the manifest declares GPL-2.0+ while the artifact license file was detected as GPL-2.0. The mismatch creates a real licensing clarity concern.
The package has existed for over 10 years and has 353 releases, but it has had no releases in the last 12 months; that suggests maintenance may have slowed.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
acp3/core Version 4.0.0-rc.29.3 | — | — |
acp3/setup Version 4.0.0-rc.29.3 | — | — |
acp3/module-users Version 4.0.0-rc.29.3 | — | — |
acp3/module-errors Version 4.0.0-rc.29.3 | — | — |
acp3/module-system Version 4.0.0-rc.29.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.