se7enxweb/ezpublish
It includes a substantial artifact, tests, release notes, a license, and a security policy. The linked project is small and its six workflow actions are unpinned, adding maintenance and build-integrity concerns. Pin the replacement se7enxweb/exponential instead.
35%
Total Score
0
79
100
Health Score Breakdown
Packagist marks the package abandoned and names se7enxweb/exponential as its replacement. This is a major adoption and maintenance risk for this release.
The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release exists, the current development inactivity raises abandonment risk.
The linked repository is named exponential rather than ezpublish and does not mention this package in its README. That weakens confidence that the repository is the package's directly maintained source.
The single workflow was fully analyzed and uses read-only permissions with no reported dangerous findings, but all six action references are unpinned. That leaves avoidable build-integrity exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 se7enxweb/ezie Version ~6.0.0 | — | — |
se7enxweb/ezwt Version ~6.0.0 | — | — |
se7enxweb/bccie Version ~1.1.3 | — | — |
se7enxweb/ezodf Version ~6.0.0 | — | — |
se7enxweb/swark Version ~1.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.