Its README is clear, the codebase includes tests, and installation has no lifecycle scripts. The main reservation is that neither releases nor commits have appeared for about 7 years and 10 months.
62%
Total Score
75
100
88
88
The package has only one release, published about 7 years and 10 months ago, with no releases in the last 12 months; this is a meaningful maintenance concern.
There were zero commits and zero active maintainers in the last 3 months, consistent with a project that has received no updates for years and increasing abandonment risk.
Composer build tooling is present, but no security-scanning tool is reported; this is a modest transparency and hygiene gap for an otherwise small project.
The repository has no security policy, reducing clarity about how vulnerabilities would be reported, though this is less significant for the package's narrow scope.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.