sync*gw file bundle.
72%
Total Score
caution
Usable with caveats: the declared LGPL license conflicts with the detected GPL license.
The package declares LGPL-3.0-or-later and includes a license file, but the artifact license is detected as GPL-3.0 and the README also describes GPL-3.0. This licensing mismatch needs clarification even though the release is not unlicensed.
Composer is used as the build tool, which fits this PHP package. No security scanning tools are reported, leaving limited automated security hygiene evidence.
The repository has no security policy. For a small file-storage bundle this is a transparency gap, but it is not by itself evidence of abandonment or unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
syncgw/core-bundle Version ^9.20 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.