The README gives clear integration steps, while the stable version and small dependency surface reduce adoption friction. The organization-backed repository is not archived, but its connection to this package should be verified before adoption.
52%
Total Score
75
79
No declared license, license file, or repository license file was detected, leaving developers without clear permission to use or redistribute the package.
The package has only three releases and none in the last 12 months; its latest release was published in March 2024, indicating a long maintenance gap for a package assessed in 2026.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap and increasing abandonment risk.
The linked repository name does not match the package name and its README does not mention the package, so the repository may not clearly establish ownership of this release.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
qcovery/vufind-composer-installer-plugin Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.