Package Health

ezsystems/ezplatform-ee-installer

Unfit to use: the source repository is archived and has had no commits or releases since March 2022. The assessed v3.3.0 also conflicts with the registry’s reported latest version v2.5.7, leaving serious maintenance and release-transparency concerns.

Latest v3.3.0PackagistPackagist

15%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

63

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Using this package? Scan for Free

Health Score Breakdown

Release historydanger

Although the package has 82 releases since 2016, its latest release was March 21, 2022, with no releases in the last 12 months; the long gap materially increases abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the archived state and indicating no active maintenance.

Repository archiveddanger

The linked repository is archived, with its last push on March 21, 2022; archived source is a severe abandonment risk for a dependency.

Dangerous workflowscaution

One of three workflows uses pull_request_target, which can carry elevated workflow risk even though no untrusted checkout or script injection was detected.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency gap, though it is secondary to the repository’s abandonment.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ibexa AS

Direct Dependencies

DependencyLast ReleaseScore
symfony/config
Version ^5.0
—
—
symfony/http-kernel
Version ^5.0
—
—
symfony/event-dispatcher
Version ^5.0
—
—
ezsystems/ezplatform-kernel
Version ^1.3
—
—
symfony/dependency-injection
Version ^5.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform