The package has a narrow contributor base and no security policy or security scanning, limiting resilience and transparency. Organization backing, frequent releases, and a matching repository provide useful continuity.
74%
Total Score
83
100
89
88
All six recent commits came from one contributor, so maintenance is vulnerable to that person's availability; organizational backing partly mitigates but does not remove this concern.
The repository has no stars or forks and only two watchers, indicating limited visible community adoption; this is supporting evidence rather than a decisive health issue.
Composer is used as a build tool, but no security scanning tools were detected, leaving automated security coverage limited.
The linked repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao-components/installer Version ^1.0.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.