This is a reasonably well-packaged but still young PHP library. The release history shows seven releases over 165 days with a median interval of about 14 days, and the artifact includes a substantial README, changelog, PHPUnit configuration, and extensive unit tests. The MIT manifest declaration, absence of install-time lifecycle scripts, and non-deprecated registry status are positive. However, the package remains on the 0.x version line, has no declared source repository, and therefore provides limited transparency into ongoing maintenance, review, and provenance; repository activity and backing cannot be assessed. It is usable as a dependency, but adoption should account for its early maturity and limited verifiability.
72%
Total Score
50
90
100
The package declares six runtime dependencies, including several ecosystem-specific libraries, creating moderate coupling and some transitive maintenance exposure; no severe dependency issue is shown by this signal alone.
The assessed version is a non-prerelease 0.6.0, but the 0.x major line signals an API that may still evolve and a project that has not yet demonstrated mature long-term stability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpstan/phpstan Version ^2.1 | — | — |
adachsoft/ai-tool-call Version ^2.0 | — | — |
adachsoft/php-code-reader Version ^0.6.0 | — | — |
adachsoft/static-class-finder Version ^0.2.0 || ^0.3.0 | — | — |
adachsoft/normalized-safe-path Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.