blesta/square
The package has one runtime dependency and no install-time scripts, keeping adoption simple. Organization backing helps offset the limited repository security and maintenance signals.
72%
Total Score
75
100
86
75
Health Score Breakdown
The artifact includes an MIT license file, so the release is licensed, but the manifest declares it as proprietary; that mismatch creates a transparency concern.
The repository recorded zero commits and zero active maintainers in the last 3 months. This is a maintenance concern, although the recent package release provides some compensating evidence.
Composer is used for builds, but no security scanning tools are configured. The missing scanning is a modest hygiene gap rather than evidence of abandonment.
The repository has no security policy, leaving the process for reporting and handling vulnerabilities unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 blesta/composer-installer Version ~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 18 hours ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.