oxid-community/moduleinstaller
Its README describes an alpha tool and explicitly warns against live use. Install-time scripts and no repository security scanning add operational risk, despite a declared GPL-3.0 license and organization backing.
12%
Total Score
50
43
67
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. Package-level deprecation is a severe dependency health concern.
The last release was in August 2019, with no releases in the last 12 months; the package has been without a release for nearly seven years.
The repository had zero commits and zero active maintainers in the last three months, consistent with abandonment rather than merely a slow cadence.
The linked repository is archived and was last pushed in June 2020, indicating the project is no longer actively maintained.
The package defines post-install and post-update Composer scripts, so installation and updates execute package-controlled actions. This adds operational exposure for a package that is already abandoned.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/dotenv Version ^v4.3.3 | — | — |
composer/composer Version ^1.9 | — | — |
symfony/twig-bundle Version ^3.2 | — | — |
oxid-community/symfony-kernel Version dev-fix-endles-update | — | — |
oxid-community/symfony-security-bundle Version * | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.