Tests, documentation, and a stable release line provide useful adoption support. The single recent commit, absent security policy, and license mismatch warrant checking maintenance ownership and licensing before adoption.
67%
Total Score
50
93
50
The manifest declares MIT, but the artifact license file is detected as BSD-3-Clause. The release is licensed, but the mismatch needs clarification before adoption.
One contributor made all commits in the last three months, leaving maintenance dependent on a single active contributor. The repository owner is a user account, so no organizational handoff is evident from the provided backing data.
Only one commit was recorded in the last three months, showing limited recent development activity. The recent push helps, but this is thin evidence of sustained maintenance.
The linked repository has no security policy. This is a transparency gap for a package that includes file-manager functionality, though it is not evidence of a security defect by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
studio-42/elfinder Version ^2.1.69 | — | — |
weline/module-backend Version @dev | — | — |
weline/module-file-manager Version @dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.