bap72190/composer-importer
The package is small and easy to inspect, with a clear README and no install-time scripts. Its stable release and matching repository help, but years without commits or releases leave compatibility and maintenance uncertain.
42%
Total Score
50
100
75
88
Health Score Breakdown
The latest release was in July 2021, and there have been no releases in roughly five years. That long gap is a substantial abandonment concern for a Composer plugin.
No license declaration or license file was detected in the package or repository, leaving the legal terms for adoption unclear.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the multi-year release gap and limited evidence of ongoing maintenance.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is supporting evidence rather than decisive, but it provides little indication of a maintained user community.
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is less serious than the maintenance concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^3.4 | — | — |
symfony/finder Version ^3.4 | — | — |
composer/semver Version ^3 | — | — |
webmozart/path-util Version ^2.3 | — | — |
webflo/drupal-finder Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.