This is a coherent, licensed, non-deprecated release with a matching repository, a small dependency profile, a documented changelog, and no install-time scripts or dangerous workflows. However, it is extremely new, with only three releases since its first publication, no recorded commit or maintainer activity over the measured three-month window, no tests, no security policy, and no security scanning; the zero activity is partly explained by the package being less than a day old, but there is not yet enough history to establish mature maintenance or release reliability. It is usable with normal dependency review and pinning, but should be treated as a relatively immature dependency.
64%
Total Score
88
100
78
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.