The package is a tiny, stable shim with a clear MIT declaration and minimal runtime dependency. Its only release dates from March 2019, and the 23-character README offers little guidance for checking current compatibility.
52%
Total Score
100
100
67
50
There has been only one release, published in March 2019, with no releases in the last 12 months. This is the main maintenance and compatibility concern, although the package is a small stable shim.
The artifact includes a README, but it is only 23 characters long and provides no integration guidance. The absence of tests and a changelog is expected for a published asset shim and is not itself a gap.
Composer is used as a build tool, but no security scanning tooling is present. For this very small package that is a modest transparency gap rather than a severe risk.
The repository has no published security policy. This reduces disclosure transparency, though the package contains only a small static integration asset.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
contao-components/installer Version ^1.0.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.