This is a clearly licensed, non-deprecated package with a matching repository, a usable README, a stable 1.0.1 release, and no install-time lifecycle scripts. However, it is effectively brand new: the registry shows only one release and the repository has no observable commit activity over the last three months, so maintenance maturity cannot yet be established. The artifact and repository also contain no tests or changelog, and the repository has no security scanning or security policy. It may be reasonable for adoption where the package’s small scope is acceptable, but it should be treated as an immature dependency until sustained maintenance and stronger project hygiene are demonstrated.
62%
Total Score
50
100
81
83
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getkirby/composer-installer Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.