Its source contains tests, a changelog, and a substantial file tree, with a declared GPLv2 license and no install-time scripts. The project has shown no commit activity in three months and its latest release dates from 2013, while the prerelease status and missing security policy add adoption risk.
30%
Total Score
25
71
75
There were zero commits and zero active maintainers in the last three months. Combined with the 2013 latest release, this indicates the project is not actively maintained.
The latest release was published on July 27, 2013, and there were no releases in the last 12 months despite 15 releases overall. This long release gap is strong evidence of abandonment risk.
The repository had no new or closed issues or pull requests in the last month, leaving no evidence of current issue handling. This reinforces the maintenance concern, although only two issues and one pull request are open.
The repository name does not match the package name and its README does not mention the package. Although naming differences can occur in bundles, the missing README reference makes package ownership less clear.
The linked repository is not archived, which is a compensating sign, but its last recorded push was in August 2013. The repository remains available without showing current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phing/phing Version 2.4.12 | — | — |
propel/propel1 Version 1.6.* | — | — |
imagine/imagine Version >=0.4.1 | — | — |
propel/propel-bundle Version 1.2.* | — | — |
alphalemon/elfinder-bundle Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.