itlo/cms-composer
The package has a clear license, a changelog, and no install-time scripts, but its tiny source tree and single runtime dependency offer little evidence of ongoing development. Pinning this release carries substantial abandonment risk because no commits or releases have appeared for about 5 years and 5 months.
38%
Total Score
0
100
70
75
Health Score Breakdown
Only two releases were published, both in April 2021, with no releases in the last 12 months. That long silence materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the roughly 5-year maintenance gap shown by release history.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide no meaningful community signal to offset the inactivity.
No security policy is present. This is a transparency and incident-response gap, though it is less serious than the demonstrated lack of maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Roman Ivan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/composer-config-plugin Version ^1.0@dev | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.