The MIT license, matching repository, clear README, and stable release reduce adoption friction. However, the solo-owned project has no security policy and appears effectively dormant, so future compatibility support is uncertain.
52%
Total Score
25
50
81
83
The package has four releases, but its latest release was in December 2019 and there have been no releases in nearly seven years. This materially raises abandonment and compatibility risk.
There were zero commits and zero active maintainers in the last three months, consistent with the repository having received no recent maintenance. This is the strongest ongoing-support concern.
The package has three runtime dependencies, including the eZ Platform kernel and Form Builder, so its compatibility depends on an older platform stack but the dependency set is not unusually large.
The repository is owned by an individual account rather than an organization, so the small apparent maintainer base offers limited visible support capacity.
The repository uses Composer for builds, but it reports no security scanning tools. For a small package this is a hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ezsystems/ezpublish-kernel Version ^7.3 | — | — |
ezsystems/ezplatform-form-builder Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.