The embedded third-party license files and several install-time scripts add review work, while the artifact includes tests and a substantial application tree. The repository could not be found, so maintenance and provenance cannot be verified.
42%
Total Score
100
70
75
The package has made no release in nearly three years despite being about four years old, which is a substantial abandonment concern. Its 18 releases show earlier activity but do not compensate for the current gap.
The package declares MIT and includes license files, so it is not unlicensed. The additional MPL, OFL, GPL, LGPL, and BSD files appear to cover bundled assets, but their relationship to the package license needs review.
Five install- or update-time Composer scripts execute during package operations, increasing integration and supply-chain review requirements. This is common for a full CMS application but remains a meaningful operational concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
atlantis-labs/atlantis3_5-framework Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.