Plugin center and plugin entry manager for ThinkAdmin
68%
Total Score
caution
A recent release offsets very low activity, one-contributor dependence, no security policy, and an unpinned workflow action.
The package and repository are owned by the same individual account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
The package has existed for about 3 years and 4 months, but only two releases appeared in the last 12 months, indicating a modest maintenance cadence rather than rapid ongoing development.
One contributor made 100% of the one commit in the last 3 months, leaving maintenance dependent on a single active individual.
Only one commit was recorded in the last 3 months, which is weak recent activity even though the current release was published recently.
Composer is used for builds, but no security-scanning tool is configured; this is a transparency and hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zoujingli/think-install Version ^1.0|@dev | — | — |
zoujingli/think-library Version ^6.1|@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.