magero/magento-project-installer

Name lookalikedanger

The package borrows the identity of the much more established `magento/magento-composer-installer`; its name is similar and it explicitly borrows the lookalike identity, despite only 0.125 artifact overlap. Consumers may choose this package accidentally.

Release historydanger

Only three releases exist, with no release in more than five years and no releases in the last 12 months. That strongly reduces confidence in compatibility and maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was in October 2020. This is strong evidence that maintenance has stopped.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security scanning tools are configured. That leaves dependency and build risks less visible.

Security policycaution

The repository has no security policy. This is a transparency and response gap, although it is less significant than the long maintenance pause.