Its GPL-2.0 licensing, single runtime dependency, and organization ownership provide useful context. The long-established project is no longer showing maintenance activity, and it offers little consumer documentation or security-process evidence.
43%
Total Score
83
100
69
75
The artifact has no README, tests, or changelog, while the repository also reports none. Missing tests and changelog are normal for published artifacts; the lack of consumer documentation is a modest transparency gap for this extension.
The package has 15 releases since February 2016, but none in the last four years; the latest release was in August 2022. This strongly raises abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no release since August 2022. This is the strongest maintenance concern.
The repository has zero stars and one fork. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of a broad support community.
The repository uses Composer, showing basic build tooling, but reports no security-scanning tools. The missing scanning is a transparency and hygiene gap rather than proof of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ezsystems/ezpublish-legacy-installer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.