A PHP code checks automation tool that can be used as git pre-commit hook.
42%
Total Score
unhealthy
Risky: no release in more than eight years, with limited maintenance and transparency evidence.
Only two releases were published, with the latest on March 9, 2018 and none in the last 12 months. That long period without a release is strong evidence of abandonment risk.
Five runtime dependencies include Symfony components and code-quality tools such as PHP-CS-Fixer and PHPMD. This is a meaningful dependency surface for a small CLI, though the listed tooling matches its stated purpose.
A post-install-cmd script runs during installation, increasing supply-chain and reproducibility risk because installation performs additional actions beyond file extraction.
One registry account has publish access. This does not prove weak maintenance capacity, but it provides little redundancy if that maintainer becomes unavailable.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpmd/phpmd Version ^2.0 | — | — |
symfony/console Version ^4.0 | — | — |
symfony/process Version ^4.0 | — | — |
friendsofphp/php-cs-fixer Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.