The repository has no security policy and shows little community activity. Its README, Composer setup, and exact package/repository match provide useful transparency, but maintenance risk remains high.
38%
Total Score
100
60
75
This package has had only one release, published in May 2021, with no releases in the last 12 months. That long period without a new release is a substantial maintenance concern.
The repository has 0 stars, 0 forks, and 1 watcher, indicating a very small user and contributor footprint. Popularity is only supporting evidence, but it offers little compensating signal for the stale release history.
The repository is not archived, which is a positive sign, but its last push was in May 2021 and provides no evidence of recent maintenance.
The repository has no security policy. This is a transparency and response-process gap, though it is less serious than the package's prolonged lack of maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.