The README and Composer setup are clear, and the repository is active rather than archived. However, the project is only about five months old, has released twice on one day, and shows no commits in the past three months; missing tests and security scanning add uncertainty.
58%
Total Score
75
100
78
83
The package is only about five months old and has two releases, both published on the same day, so its maintenance history is too short to establish a reliable cadence.
The repository recorded no commits and no active maintainers in the past three months, which is concerning for a young tool whose upgrade logic may need ongoing compatibility work.
The repository has zero stars, forks, and watchers. This is supporting evidence of limited adoption, not a decisive health problem by itself.
Composer is used for the build, providing normal project tooling, but no security scanning tool was detected, leaving a modest transparency gap.
The repository has no security policy, so users lack documented guidance for reporting vulnerabilities in a tool that modifies project code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.0 | — | — |
symfony/finder Version ^7.0 | — | — |
symfony/console Version ^7.0 | — | — |
symfony/process Version ^7.0 | — | — |
nikic/php-parser Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.