Usable with caveats: this is a small, clearly backed package with a stable MIT release and no deprecation, but it has had no new release or repository activity since May 2025. The extremely short README and lack of security policy reduce transparency for adopters.
55%
Total Score
50
100
72
75
There were no commits and no active maintainers in the last three months. Combined with the single-release history, this is the strongest evidence of possible abandonment risk.
The artifact includes a README and changelog, and the repository also has a changelog; the 15-character README is technically present but provides very little guidance to consumers. No published tests are not a concern for this small package.
The package has only one release, published about 16 months ago, with no releases in the last 12 months. That is a meaningful maintenance concern, although a small stable package may not need frequent releases.
The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad user or contributor community.
Composer is used as a build tool, which fits the package ecosystem, but no security scanning tooling is present. This is a transparency and maintenance gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
loilo/fuse Version ^7.0 | — | — |
getkirby/composer-installer Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.