Usable with caveats: the repository is active and the release includes a stable, focused plugin with repository tests, but it has no release track record and all recent commits come from one contributor. Missing security policy and undeclared workflow permissions add transparency concerns.
68%
Total Score
63
100
83
80
One registry maintainer is consistent with a small personal project, but it leaves little publishing redundancy or visible succession capacity.
The registry namespace and repository are owned by the same individual account, confirming a directly backed personal project rather than an organization with broader maintenance capacity.
This is the first and only release, published less than one hour before collection, so there is no evidence yet of sustained release maintenance or compatibility over time.
One contributor made all 27 commits in the last three months, creating a genuine continuity risk. The active commit volume partly compensates, but there is no second contributor to provide maintenance resilience.
The repository has zero stars, forks, and watchers. This offers no adoption evidence, although low popularity alone is not a strong health verdict for a newly published package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.