The stable 1.0.0 release has a simple dependency profile and no install-time scripts. It comes from a matching organization-owned repository, but the project offers little evidence of ongoing care or consumer documentation.
38%
Total Score
50
100
69
75
This package has only one release, published about seven years ago, with no releases in the last 12 months. That is strong evidence of an inactive project.
The repository had zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and raising abandonment risk.
No registry license declaration or license file was detected in the package or repository. The licensing terms are therefore unclear for adopters.
The artifact has no README, while tests and a changelog are not expected to be shipped in many package artifacts. The missing consumer documentation is still a transparency gap for this small package.
The repository has zero stars and forks and only three watchers. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of an active user community.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.