The project has active development and clear release notes, but it is an experimental first release with one contributor and no security policy. Its proprietary license also limits how confidently it can be adopted as an open-source dependency.
62%
Total Score
67
100
72
88
The manifest declares a proprietary license, so the release is licensed, but its terms may restrict use and redistribution compared with a permissive open-source dependency.
The repository is owned by an individual rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
This is the package's first release, published today, so there is no track record yet to demonstrate sustained maintenance or stable releases.
All 55 recent commits came from one contributor, creating a concentrated maintenance dependency and limited handoff capacity.
The repository has one star and no forks, providing little community validation. This is supporting evidence only and does not outweigh the recent commit activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
getkirby/composer-installer Version ^1.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.