GM Panel assets
55%
Total Score
caution
Usable with caveats: no commits since April 2025 and the artifact's MIT/GPL licensing is inconsistent.
The package declares MIT and includes a license file, but the artifact license is detected as GPL-2.0, creating a material licensing ambiguity for consumers.
Only two releases exist, with none in the last 12 months; the latest release was about 18 months ago. This indicates limited ongoing maintenance despite a stable 1.0.1 release.
There were no commits and no active maintainers in the last three months, consistent with the repository's last push about 18 months ago. This is a meaningful abandonment risk.
The repository uses Composer, but no security-scanning tools were detected. For a small frontend asset package this is a hygiene gap rather than evidence of unsafe code.
No security policy is present, leaving no documented channel or process for reporting vulnerabilities. This lowers transparency but is not severe on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gearmagicru/gm-composer-plugin Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.