This release appears usable and actively maintained: it has a long release history, a current stable version, a recent release, an unarchived organization-owned repository, recent commits from two contributors, and no install-time scripts or registry deprecation. However, transparency and maintenance confidence are reduced by the absence of tests and a security policy, very low repository adoption indicators, and the linked repository neither matching the package name nor mentioning the package in its README; verify the repository relationship and fit before adopting it for a critical dependency.
72%
Total Score
100
100
78
90
A README and changelog are present, but neither the artifact nor repository contains tests; for a substantial 966-file legacy design package, the absence of visible tests is a genuine maintenance and regression-risk gap.
The repository name does not match the package name and its README does not mention the package, so the linkage is not independently corroborated and may indicate that the package is using a repository intended for something else.
The repository has zero stars, two forks, and one watcher, so external adoption and review appear limited; this is supporting caution rather than evidence of abandonment because recent activity is present.
Composer is used as a build tool, providing expected package tooling, but no security scanning tools are configured, leaving security hygiene less transparent.
No repository security policy was found, reducing guidance and transparency for reporting vulnerabilities in a package that may be deployed in legacy web applications.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ezsystems/ezpublish-legacy-installer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.