The package is clearly documented and includes repository tests, a matching license, and a security policy. Its long-term maintenance record is not yet established, and all three workflow actions are unpinned.
68%
Total Score
75
100
86
88
This is the first release, published today, so there is no release history to demonstrate sustained maintenance or reliable update practices.
There have been no commits or active maintainers in the last three months, but the repository was only created today, so this is primarily an unproven-history concern.
Composer build tooling is present, but no security scanning tool was detected; the repository's security policy partly compensates for that hygiene gap.
The single workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings. However, all three action references are unpinned, leaving avoidable workflow supply-chain exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getkirby/composer-installer Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.