The package includes a readable guide and tests, with no install-time scripts. Its license files are present, but their GPL text conflicts with the AGPL-3.0 declaration.
38%
Total Score
100
60
100
Only one release exists, dated over seven years ago, with no releases in the last 12 months. That strongly raises abandonment risk for a dependency.
The artifact includes license files, but the declared AGPL-3.0 does not match the GPL-3.0 license detected in those files. The presence of license text is positive, while the mismatch needs resolution.
The assessed version is a prerelease, and every recent release is marked prerelease. The package README also describes the integration as alpha rather than stable.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.