TailPress installer package.
30%
Total Score
50
75
88
Packagist marks the entire package as abandoned and directs users to `tailpress/installer`, which is a direct adoption risk even though version 5.0.2 is recent.
All recent commit activity came from one contributor, leaving maintenance dependent on a single person; the organization-owned repository provides some handoff capacity but no second active contributor is shown.
There was one commit in the last 3 months, so maintenance is visible but limited rather than clearly active.
The repository name does not match the package name and its README does not mention this package, so the package-to-repository relationship is less transparent.
Composer build tooling is present, but no security scanning tools are configured, leaving automated security oversight unconfirmed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^6.0|^7.0 | — | — |
symfony/process Version ^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.