The package includes tests, a clear MIT license, and a usable README. Organization ownership and three releases in the last year provide some support despite limited public activity and absent security tooling.
72%
Total Score
83
100
88
88
The package has existed for about 8 years and published three releases in the last year, but its five-release history has a long median interval of about 696 days. Recent activity is encouraging, though the overall cadence is uneven.
No commits and no active maintainers were recorded in the last three months. Recent registry releases partly offset this, but the lack of observed development activity still lowers maintenance confidence.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe dependency risk.
The repository has no security policy, leaving vulnerability reporting expectations undocumented. This is a minor transparency gap for a package integrating with a payment service.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
blesta/composer-installer Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.