38%
Total Score
unhealthy
Risky: one release in about eight years and no recent repository activity point to an effectively abandoned package.
There has been only one release, on July 19, 2018, with no releases in the last 12 months. That strongly indicates the package is no longer maintained.
The repository had zero commits and zero active maintainers in the last three months, consistent with several years of inactivity and materially increasing abandonment risk.
The package runs post-install and post-update Composer scripts. These can be appropriate for an installer plugin, but they increase dependency-installation behavior that should be understood before adoption.
A README is present, but it contains only 18 characters and provides little consumer guidance. Missing tests and changelog files are normal for a published package artifact and are not counted against it.
The repository has zero stars, forks, and watchers. This is supporting evidence of limited adoption, not decisive by itself, but it provides no compensating maturity signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.