magero/magento-project-skeleton

Name lookalikedanger

The package borrows the identity of magento/magento-composer-installer, which has 354,293 monthly downloads and 19 stable releases, while this package has zero monthly downloads and explicitly signals borrowed identity. Consumers may have intended to choose the established package instead.

Release historydanger

The latest release was in November 2017, and there have been no releases in the past 8 years and 10 months. That is strong evidence of abandonment for a project intended to support development workflows.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the past 3 months, consistent with the long release gap rather than active maintenance.

Lifecycle scriptscaution

The package runs a post-create-project-cmd script during installation. Because this executes automatically, it adds operational and supply-chain exposure beyond a purely declarative package.

Repo popularitycaution

The linked repository has 1 star, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these very small numbers provide little external evidence of maturity or community support.