Composer plugin to import composer scripts from sources
58%
Total Score
caution
Usable with caveats: no release or commit activity for nearly three years.
The package and repository are owned by the same individual account rather than an organization. This is not inherently unhealthy, but it provides less evident maintainer capacity than organizational backing.
The package has 7 releases since April 2021, but none in the 12 months before collection; its latest release was nearly three years ago. This indicates a largely inactive release line, although the history is long enough to show prior maintenance.
The repository recorded zero commits and zero active maintainers in the three months before collection, consistent with the long release gap. This is the strongest evidence of current inactivity.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide little independent evidence of broad review or adoption.
Composer build tooling is present, but no security-scanning tool was detected. For a small package this is a modest hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.