38%
Total Score
50
100
69
75
This is the only release, published about 10 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite the package not being deprecated.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
A README is present and explains the extension's purpose. The absence of packaged tests and a changelog is normal packaging practice, while the repository also provides no tests or changelog to strengthen maintenance evidence.
The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these numbers provide no additional maturity signal.
Composer is used as a build tool, but no security scanning tools are configured. This is a hygiene gap that adds concern alongside the lack of recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version 1.*,>=1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.