It has a fast recent release cadence and a stable version, while the linked repository is active and not archived. The single-contributor history leaves little maintenance redundancy, and the license text is narrower than the manifest declaration.
68%
Total Score
67
100
88
100
The artifact contains license files and declares GPL-2.0-or-later, but the detected GPL-2.0 text does not clearly cover the broader declaration. The release is licensed, but the mismatch warrants clarification.
One contributor made all 9 commits in the last 3 months, giving the project a bus factor of one. The active cadence helps, but there is no demonstrated maintenance redundancy.
The repository recorded 9 commits in the last 3 months, showing current activity. However, all of that activity came from one maintainer, so continuity depends heavily on that person.
Composer is used for builds, which is appropriate for this package, but no security scanning tools were detected. That is a modest transparency and hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
se7enxweb/ezpublish-legacy-installer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.