The package has had no commits or releases for about six years, with one open issue and no security policy. Its license, matching repository, small dependency set, and stable non-deprecated release provide useful transparency, but maintenance risk remains substantial.
45%
Total Score
33
100
78
83
The latest release was about six years ago, with no releases in the last 12 months; 19 historical releases show the project was once active but is now stale.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating substantial abandonment risk.
The repository is owned by an individual, so the single registry maintainer is consistent with the project’s ownership context but leaves limited visible organizational backing.
There has been no issue or pull-request activity in the last month, and one issue remains open; this adds modest evidence that maintenance is inactive.
The repository has one star and one fork. Low popularity is only supporting evidence, but it provides little indication of a broader community able to sustain the package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.