The package has a clear installation guide, a small runtime dependency surface, and no install-time scripts. Its lack of security tooling and policy leaves little support for continued maintenance.
8%
Total Score
100
100
43
75
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on the release.
There has been only one release, published over nine years ago, with no releases in the last 12 months. This strongly indicates abandonment.
The linked repository is archived and was last pushed in October 2018, so upstream changes and maintenance should not be expected.
No declared license, license file, or repository license file was detected. That creates a material legal and transparency gap for adoption.
Composer is used for builds, but no security-scanning tooling is present. Given the archived project, this adds to the lack of ongoing maintenance assurance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
league/oauth2-google Version 2.0.0 | — | — |
pimcore/installer-plugin Version >=1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.