The package is small and clearly documented, with no install-time scripts or deprecation notice. Its single-maintainer setup and minimal repository leave limited evidence of ongoing support.
52%
Total Score
50
75
83
The package has one registry maintainer, so publishing and support capacity depend on a single person. The matching user-owned repository provides some ownership clarity but does not offset the lack of recent activity.
Only two releases arrived within minutes on August 19, 2023, followed by no releases for about three years. This suggests a finished or abandoned project rather than active maintenance.
The repository has had zero commits and zero active maintainers in the last three months, consistent with the long gap since its last release. The repository is not archived, which is a limited compensating signal.
The repository name does not match the package name and its README does not contain the package name, creating uncertainty about whether the linked repository is the intended source. The matching owner and package file tree provide some context but do not remove that concern.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of broad community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wireframe-framework/processwire-composer-installer Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.