The README and release notes explain installation and the latest change, while the stable version and small dependency footprint are reassuring. Long-term ownership and legal reuse remain unclear.
38%
Total Score
50
100
69
75
The package has had only three releases, with the latest published in April 2015 and none in the last 12 months. This strongly raises abandonment risk, although the release cadence was initially regular.
The repository recorded zero commits and zero active maintainers in the last three months, with its last push in April 2015. The repository is not archived, but that does not offset the prolonged inactivity.
No declared license, license file, or detected license was found in the package or repository. This creates a real legal and transparency concern for adoption.
The repository has 2 stars, 0 forks, and 4 watchers, providing little supporting evidence of broad review or community continuity. Popularity is only supporting evidence, so this is a modest concern rather than a verdict.
Composer build tooling is present, but no security-scanning tooling was detected. For an old, inactive package this leaves less evidence of ongoing maintenance hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
thelia/installer Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.