nabu-3/composer-installer-plugin

Release historydanger

The latest release was published about nine years ago, and there were no releases in the last 12 months. The 18-release history shows earlier activity but does not offset the prolonged inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being about nine years ago. This is strong evidence of abandonment risk.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive, but it provides no additional maintenance signal here.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. For a small Composer plugin this is a modest hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it is less significant than the long inactivity period.