topthink/think-installer
The project has only 13 stars, no security scanning, and no security policy, although organizational backing is visible. The Apache-2.0 declaration and minimal dependency set reduce adoption friction.
38%
Total Score
50
100
67
83
Health Score Breakdown
The latest release was over five years ago, with no releases in the last 12 months. That prolonged inactivity materially raises abandonment risk despite the package's long history and 20 total releases.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance capacity.
The repository uses Composer, but no security scanning tools were detected. This is a maintenance and transparency gap, though it is less severe than the inactivity signals.
No security policy was found in the linked repository, reducing transparency about vulnerability reporting and response. Organizational backing partly offsets this, but no other provided signal shows an established security process.
The assessed version is v2.0.5, while the reported latest version is v1.0.14; this inconsistency weakens confidence in the release metadata and may indicate an unusual or poorly synchronized release line.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 yunwuxin |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.