getkirby/composer-installer

Release historycaution

The latest registry release was published about five years and nine months ago, and there were no releases in the last 12 months. The package has a substantial release history, but this release appears stale and maintenance is uncertain.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This conflicts somewhat with the later push date and leaves current maintenance capacity unclear.

Token permissionscaution

The workflow does not declare top-level token permissions, which is a minor workflow-hygiene gap; it does not show that write permissions are actually used.