The repository has only one active contributor and one commit in the last three months. A clear license, release notes, and security policy improve transparency, but the small audience limits evidence of resilience.
67%
Total Score
50
89
100
The repository is owned by a user account rather than an organization, so the concentrated recent activity is not offset by visible organizational backing.
One contributor made 100% of the commits in the last three months. This concentration creates a meaningful continuity risk if that contributor stops maintaining the project.
Only one commit was recorded in the last three months, showing limited recent maintenance activity despite the recent registry releases.
The repository has 2 stars, 0 forks, and 0 watchers. Popularity is supporting evidence rather than a verdict, but these low numbers provide little external evidence of broad use or community resilience.
Composer is used for builds, but no security scanning tools were detected. The missing scanning is a hygiene gap, while the build tooling provides some reproducibility support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
se7enxweb/ezpublish-legacy-installer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.