Its MIT license, README, tests, and lack of install-time scripts make the package transparent to inspect. The single maintainer and minimal security tooling add little reassurance.
12%
Total Score
25
50
75
Packagist marks the entire package as abandoned, with no replacement supplied. This is a direct warning against taking a new dependency on the release.
The package has had no releases in roughly 10 years and none in the last 12 months. Its five-release history shows a completed rather than active maintenance cycle.
There have been zero commits and zero active maintainers in the last 3 months, consistent with the archived repository and abandoned registry status.
The linked repository is archived and was last pushed about 10 years ago, indicating the project is no longer maintained.
The repository is owned by the apnet organization, which provides some ownership context, but it does not compensate for the archived state and absent recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
apnet/assetic-importer-bundle Version ~1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.