Documentation is extensive, the repository matches the package, and installation has no lifecycle scripts. Its small user base and missing security policy add little confidence for a long-lived dependency.
10%
Total Score
0
42
75
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on the package.
The package has had no releases in about 7 years, with only three releases overall. This strongly suggests the release line is abandoned rather than actively maintained.
The repository recorded no commits and no active maintainers during the last 3 months, consistent with the long period since the final release.
The linked source repository is archived, indicating the project is no longer actively maintained. Its last push was about 7 years ago.
The repository has only 2 stars, 1 fork, and 1 watcher, providing little evidence of a broad user or maintainer community to support future fixes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getkirby/composer-installer Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.