The repository is backed by an organization, includes tests, security scanning, and a clear README. Recent work is sparse and concentrated in one contributor, while all 21 workflow actions are unpinned and no security policy is published.
68%
Total Score
63
100
89
75
The package is about 696 days old with five releases, but only one release in the last 12 months and a median interval of about 123 days indicate a relatively slow cadence.
All two recent commits came from one contributor, creating a concentrated maintenance risk. Organization backing provides some ability to hand off maintenance, but no second active contributor is shown.
Only two commits were recorded in the last three months, showing limited recent development activity despite the repository having been pushed recently.
There are 12 open issues and no issues or pull requests were opened or closed in the last month, suggesting limited visible issue-management activity.
The repository has only two stars and three forks, indicating limited adoption evidence. Popularity is supporting evidence rather than a decisive health measure, so this is not treated as a major defect.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^2|^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.