omeka/composer-addon-installer
The package is clearly licensed, documented, and backed by an organization, with the repository explicitly mentioning it. Its broad runtime dependency set and absent security policy add ongoing maintenance and transparency concerns.
52%
Total Score
50
50
83
50
Health Score Breakdown
The package has 29 releases over nearly 10 years, but its latest release was nearly three years ago and there were no releases in the last 12 months. This materially raises abandonment risk despite the historically regular cadence.
The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the long release gap and indicating no recent maintenance capacity.
The package declares 65 runtime dependencies, creating a substantial maintenance and compatibility surface for a small add-on. No provided signal compensates for that complexity.
The linked repository has no security policy, which reduces transparency about vulnerability reporting and handling. This is a process gap rather than evidence of unsafe code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ml/json-ld Version ^1.1 | — | — |
doctrine/orm Version ^2.8.4 | — | — |
lsolesen/pel Version ^0.9.6 | — | — |
doctrine/dbal Version ^2.13.1 | — | — |
composer/semver Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.