GearMagic Web Application installer
63%
Total Score
caution
Usable with caveats: no commits for 10 months and only one release in the last year point to slowing maintenance.
Only one registry publishing account is listed, which is a modest continuity concern, but the linked repository is organization-owned, making the short registry list less concerning than it would be for an unbacked individual project.
The package has six releases over about 19 months, but only one release in the last 12 months, indicating a notably slower cadence for a relatively young project.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the broader slowdown shown by the release history and weakening evidence of active maintenance.
Composer build tooling is present, but no security scanning tools were detected, leaving a gap in automated oversight for future changes.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gearmagicru/gm-composer-plugin Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.