The package is clearly identified, MIT-licensed, and has a useful README with simple dependencies. It has had no release for over six years and no repository commits for nearly six years, making abandonment the main concern.
43%
Total Score
50
70
75
The latest release was published over six years ago, with only two releases ever and none in the last 12 months. This strongly lowers confidence that the package is maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent development evidence.
There were no new or closed issues in the last month and one pull request remains open, providing no evidence of active maintenance. The small project may naturally have little issue traffic, so this is supporting concern rather than the main risk.
The repository has one star, one fork, and no watchers, indicating very limited visible adoption. Popularity is only supporting evidence, and the package’s clear source identity compensates for much of this gap.
The repository has no security policy. For a small plugin this is a transparency gap, though the absence of reported security tooling does not by itself show a vulnerability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.