The package is clearly licensed, documented, and matched to an organization-owned repository. Its single release and one-contributor history leave limited evidence of long-term maintenance, while the missing security policy is a smaller transparency gap.
68%
Total Score
67
100
93
83
The package is 62 days old and has only one release, so there is limited evidence of an established maintenance pattern.
All recent activity comes from one contributor, creating a concentrated maintenance dependency; organization backing partly offsets the risk.
There was one commit in the last three months, showing some activity but providing only limited evidence of sustained maintenance.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rosgear/ge2-composer-plugin Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.