composer-fork/composer
Clear documentation, tests, an MIT license, and no install-time scripts support transparency and safe packaging. Its tiny, inactive repository offers no practical maintenance path.
15%
Total Score
0
50
100
Health Score Breakdown
Packagist marks the entire package as abandoned and names composer/composer as its replacement. This is a direct warning not to adopt this package.
The latest release was in October 2014, with zero releases in the last 12 months despite the package being over 14 years old. This indicates prolonged abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and providing no evidence of ongoing maintenance.
The package is marked as a prerelease and 8 of 9 recent releases were prereleases, while the registry reports 0.0.1 as the latest version. This adds maturity uncertainty, although the abandonment evidence is more decisive.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nils Adermann |
| Jordi Boggiano |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 seld/jsonlint Version 1.* | — | — |
symfony/finder Version ~2.2 | — | — |
symfony/console Version ~2.3 | — | — |
symfony/process Version ~2.1 | — | — |
justinrainbow/json-schema Version 1.1.* | — | — |
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.