Usable with caveats: this is a small, clearly identified package with a stable release and no deprecation or archived repository. It has had no new release since May 2021, with minimal adoption and a single registry maintainer, so ongoing maintenance is uncertain.
58%
Total Score
75
100
78
88
Only one registry publishing account is listed, leaving little visible publishing redundancy. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of a broader maintenance team.
The package has only one release, published about 5 years ago, with no releases in the last 12 months. That long period without a new release lowers confidence in ongoing maintenance, although a small plugin may change infrequently.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of an active user or contributor community.
The repository uses Composer build tooling, which fits the package ecosystem, but no security scanning tool is configured. For this small package that is a modest transparency gap rather than a severe risk.
The linked repository is not archived, but its last push was about 5 years ago, reinforcing the concern raised by the release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.