Spiral Application installer
68%
Total Score
caution
Usable with caveats: recent release, but quiet maintenance and limited security oversight remain concerns.
There were no commits and no active maintainers in the three months before collection. The release-day push is encouraging, but the recent lack of ongoing activity lowers confidence in continued maintenance.
No issues or pull requests were opened, closed, or merged in the last month, while six issues remain open. Combined with zero recent commits, this indicates limited current project activity.
Composer build tooling is present, but no security-scanning tool was detected. The build is supported, while automated security oversight is limited.
The repository has no security policy. This reduces transparency about vulnerability reporting and response practices, although it is not evidence of a vulnerability itself.
The audit completed without findings or failures, but it analyzed zero workflows and therefore provides no evidence about CI workflow security or action pinning. This is a coverage limitation rather than a direct workflow hazard.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spiral/framework Version ^3.15.7 | — | — |
spiral/roadrunner-cli Version ^2.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.