The release includes a clear license, useful documentation, and a small runtime dependency footprint. Organizational backing and security scanning help, though maintenance is concentrated in one contributor and no security policy is published.
80%
Total Score
75
100
100
75
One contributor made 100% of the 47 recent commits. The Greenpeace organization provides some backing, but the observed development activity still has a low individual bus factor.
The repository recorded 47 commits in the last three months, but all were made by one active maintainer, leaving maintenance capacity concentrated.
The repository has no published security policy, leaving reporting and response expectations undocumented despite the presence of security scanning.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.