The repository is not archived and uses Composer, but it has no security policy and almost no adoption. The missing license makes reuse and redistribution terms unclear.
30%
Total Score
0
38
75
The package has made only 5 releases, with none in nearly 10 years; its last release was in October 2016. This is strong evidence of abandonment for a dependency.
The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with the long lapse since its last release and leaving no evidence of current maintenance.
No declared license and no license file were found, so the package has no clear reuse or redistribution terms. This materially limits safe adoption even though the artifact is small.
The repository has 0 stars and 0 forks, with only 2 watchers. Popularity is not decisive by itself, but it provides no supporting evidence of a maintained or widely reviewed project.
The repository has no security policy. For a small localization package this is less serious than for security-sensitive software, but it removes a useful channel for reporting dependency or release issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sanatorium/path-installers Version >=1.0.0 | — | — |
cartalyst/composer-installers Version >=1.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.