It has a clear MIT license, a focused artifact, and release notes for this version. The single-maintainer project has had no commits in the last three months and no releases in the last 12 months, so future fixes are uncertain.
65%
Total Score
50
100
92
Only one registry maintainer is listed, and the linked repository is owned by an individual rather than an organization. This leaves limited visible maintainer capacity if the project needs urgent fixes.
The package has 11 releases since April 2021, but none in the last 12 months; its latest release was in November 2024. This indicates a long maintenance gap, though the release history is established rather than abandoned from the outset.
The repository recorded 0 commits and 0 active maintainers in the last three months. With the latest push in November 2024, the absence of recent activity raises the risk that compatibility fixes may not arrive promptly.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.