The package has clear documentation, a matching source repository, and release notes for this version. Its missing license and roughly two years without a release or commit activity leave maintenance and legal-clarity concerns.
60%
Total Score
75
100
81
75
No license declaration or license file was detected in the package or repository, leaving the legal terms for adoption unclear.
The package has existed since April 2018 and has nine releases, but it has had no releases in roughly two years. That weakens evidence of ongoing maintenance.
There were no commits and no active maintainers in the last three months, consistent with a project that may no longer be actively maintained.
Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version v1.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.