Push commits made via the Pantheon dashboard back to original GitHub repository.
68%
Total Score
67
100
94
67
The package has 11 releases since January 2017, but no releases in the last 12 months and its latest registry release was over three years ago, indicating a meaningful maintenance concern.
All recent repository commits came from one contributor, creating a concentrated maintenance risk; organizational ownership provides some ability to hand maintenance to another contributor but does not demonstrate that this has happened.
Only one commit was recorded in the last three months, indicating limited recent maintenance even though the repository remains active.
No security policy was found, leaving vulnerability-reporting expectations unclear; this is a transparency gap, though it is not by itself evidence that the package is unsafe.
The repository's only workflow declares top-level write permissions, which grants broader automation authority than read-only defaults and warrants caution even though no dangerous workflow pattern was detected.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.