Risky to adopt: this is a small, one-release package with no updates since May 2021. It is not deprecated or archived and has a README plus a matching source repository, but its long inactivity and proprietary license create substantial maintenance and reuse concerns.
42%
Total Score
57
75
The package has only one release, published about 5 years ago, with no releases in the last 12 months. This provides little evidence of ongoing maintenance or compatibility work.
The repository is not marked archived, but it was last pushed about 5 years ago. That compensates for formal abandonment only partially; the extended lack of activity remains a serious maintenance concern.
The manifest declares a proprietary license and no license file was found in the package or repository. This creates a material concern for developers evaluating whether they can safely reuse and distribute the dependency.
The repository has 0 stars, 0 forks, and 1 watcher, offering little supporting evidence of community review or a broader maintenance base. Low popularity alone is not decisive, but it reinforces the inactivity concern.
The repository has no security policy. For this small plugin, that is a transparency gap, though the absence of workflows and install-time lifecycle scripts limits the practical impact.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.