The package has a clear README, release notes for this version, and a license file. Its tiny repository and lack of security tooling add little reassurance beyond the decisive abandonment signals.
8%
Total Score
100
50
50
Packagist marks the entire package as abandoned, with no replacement given. This is a severe adoption risk because future fixes and compatibility work are not indicated.
The package has had no releases in the last 12 months, and its latest release was on June 29, 2017. This strongly indicates abandonment for a dependency that may need ongoing platform compatibility.
The linked repository is archived and was last pushed on June 29, 2017, confirming that active maintenance has stopped.
The repository has only 2 stars and 1 fork, providing little supporting evidence of broad community maintenance. This reinforces the abandonment concern but is not decisive alone.
Composer is used for building, but no security scanning tools are present. This is a modest transparency and maintenance gap, especially for an archived project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pimcore/installer-plugin Version ~1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.