The repository is clearly tied to the package and backed by an organization, with a release note for this version. However, maintenance has stopped since November 2024 and no license is present, so pinning this release carries meaningful adoption risk.
45%
Total Score
50
100
71
The package has had no release in nearly two years despite 10 total releases, indicating a meaningful abandonment risk. The linked repository confirms the same last-published period.
There were zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of ongoing maintenance.
No license is declared, no license file is present in the package, and no repository license file was found. This creates a material legal and adoption concern.
Version 0.0.10 is not a stable major release, so compatibility expectations are limited. It is not marked as a prerelease, which provides a small compensating signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.