The repository has no security policy and its only workflow uses an unpinned action. Clear documentation, licensing, stable versioning, and organization backing reduce adoption friction; verify compatibility before relying on it.
61%
Total Score
75
100
83
83
The package has had no registry release in about four years, with only four releases overall and none in the last 12 months. This is a meaningful maintenance concern despite the repository remaining available.
There were no commits and no active maintainers in the last three months. Although the repository is not archived, this weakens evidence of current maintenance.
The repository has zero stars and two forks, indicating limited public adoption. Popularity is only supporting evidence, so this modestly reinforces the maintenance concern rather than deciding the score.
Composer is used for the build, but no security scanning tool was detected. That is a hygiene gap rather than evidence that the release is unsafe.
The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
thelia/installer Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.