hiqdev/composer-config-plugin
It has a clear license, tests, release notes, and a matching repository with security tooling. Packagist marks the package abandoned and names yiisoft/composer-config-plugin as its replacement; use that replacement instead.
18%
Total Score
75
71
50
Health Score Breakdown
Packagist marks the entire package abandoned and provides yiisoft/composer-config-plugin as the replacement. This is a decisive adoption risk even though the repository remains available.
The latest registry release was in March 2020, with no releases in the last 12 months. The long release gap indicates the published package is not being maintained for consumers.
The repository had no commits and no active maintainers in the last 3 months. Although the repository was pushed recently according to another signal, current observed activity is still absent.
Both workflows were analyzed successfully with no audit findings or untrusted execution paths. However, all six action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrii Vasyliev |
| Dmitry Naumenko |
| Andrey Klochok |
| Yuriy Myronchuk |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 opis/closure Version ^3.3 | — | — |
riimu/kit-phpencoder Version ^2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.