The proprietary license limits reuse, and the project has no visible security policy or adoption. The package is not deprecated or archived, and its small dependency footprint and README make its contents easy to inspect.
42%
Total Score
50
100
58
75
This is the only release, published in May 2021, with no releases in the last 12 months; nearly five years without a new release is strong abandonment evidence.
The manifest declares a proprietary license, so the release is licensed, but that restricts reuse and is less suitable for developers seeking an open-source dependency. No license file was detected to clarify the terms.
The repository is owned by an individual user rather than an organization, and the registry has one maintainer. This provides limited visible backing if the sole publisher stops maintaining the package.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with the long maintenance gap, although it may also reflect the package's small scope.
The repository has 0 stars and 0 forks, with only 1 watcher. Low popularity is supporting evidence rather than decisive on its own, but it offers little evidence of an active user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.