Integrates plausible analytics
66%
Total Score
caution
Usable with caveats: registry releases stopped after 2023 despite recent repository activity.
The repository is owned by a user account rather than an organization, so the concentrated recent contribution base is not visibly supported by broader organizational backing.
The package has had no registry releases in the last 12 months, with its latest release on 2023-12-14. Recent repository activity partly offsets the concern, but registry distribution appears dormant.
All two recent commits came from one contributor, so maintenance depends heavily on a single active contributor and has limited demonstrated redundancy.
Composer is used for builds, but no security scanning tooling was detected. The build tooling is appropriate, while the missing scanning is a modest transparency gap.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version >=1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.