Its small, focused artifact is clearly licensed and avoids install-time scripts. The sparse release cadence and no recent commit activity point to limited maintenance depth.
63%
Total Score
50
88
75
Only 3 releases have appeared across roughly 3 years, with a median interval of about 565 days; one release in the last 12 months provides some evidence of continued publishing but not a strong cadence.
There were 0 commits and 0 active maintainers in the last 3 months; the recent release push is a compensating sign, but the underlying maintenance activity remains thin.
Composer is used as the build tool, but no security scanning tools are configured, leaving a modest repository hygiene gap for supply-chain maintenance.
The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
xqkeji/composer Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.