wemakecustom/composer-script-utils
The package has tests, documentation, and a matching source repository. Its install-time scripts add maintenance exposure, and no replacement is declared.
18%
Total Score
50
100
58
67
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk even though the release itself is not separately withdrawn.
The latest release was about 10 years ago, and there have been no releases in the last 12 months. That strongly indicates abandonment for a package developers would depend on.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with its last push being about 10 years ago. This provides no evidence of ongoing maintenance.
The package defines post-install and post-update scripts, so installation and updates execute package-controlled behavior. That increases maintenance and supply-chain exposure in an otherwise abandoned package.
The linked repository is not archived, which is a small positive, but its last push was about 10 years ago and does not offset the package's abandonment indicators.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mathieu Lemoine |
| Sébastien Lavoie |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.