The project is newly published, so its long-term maintenance record is still unproven. Repository tests, release notes, security tooling, and read-only pinned workflows provide useful transparency and publishing discipline.
78%
Total Score
50
100
94
100
The package is 0 days old with four releases clustered on the same day, providing too little history to establish durable maintenance.
There were no commits or active maintainers in the prior three months, but the repository is only 0 days old, so this is limited evidence rather than established abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.