Its focused file tree and single runtime dependency keep adoption straightforward. However, maintenance appears dormant, with no releases since August 2022, no recent commits, and no security policy; limited popularity adds little evidence of ongoing support.
44%
Total Score
0
100
79
50
The package has made only two releases, both in August 2022, and has had no release in over four years. This is strong evidence of likely abandonment unless the project is genuinely complete.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long gap since the latest release. No provided activity signal compensates for this maintenance risk.
The repository has 1 star, 1 fork, and 1 watcher, providing very little supporting evidence of active community use or review. Low popularity alone is not disqualifying, but it reinforces the maintenance concern.
The repository has no security policy. This is a transparency and response-process gap, though it is less serious than the clear inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.