Composer plugin for PHP monorepo workspace management — cascading installs, dependency graph, filtering, and cross-worktree linking
62%
Total Score
caution
No commits or active maintainers were recorded in the last three months, despite a healthy package structure and recent release history.
There were zero commits and zero active maintainers in the last three months. This is the clearest abandonment concern and materially lowers confidence in ongoing maintenance.
The package has 13 releases over about seven months, but the latest release was nearly four months before collection, so the otherwise strong release history has some slowdown risk.
Composer build tooling is present, but no security-scanning tools were detected, leaving security hygiene less visible.
The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented.
Version v0.5.3 is not a stable major release, although it is not marked prerelease and recent releases have not used prerelease versions.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
auroro/composer Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.