The Aphiria dependency injection library
60%
Total Score
caution
Usable with caveats: an alpha release with no releases in 15 months and no commits in the latest 3 months.
The package has 11 releases since December 2020 but none in the last 12 months; the latest registry release was in June 2025, indicating slowed delivery.
The repository recorded zero commits and zero active maintainers in the latest 3 months, a meaningful sign of currently limited maintenance activity.
The repository uses Composer, but no security scanning tool was detected; this is a hygiene gap rather than evidence that the package is unsafe.
The assessed release is v1.0.0-alpha11, and all recent releases are prereleases, so the API and behavior may still change substantially.
The workflow audit completed fully with no high- or medium-confidence findings and no dangerous triggers or untrusted checkouts. However, its one action reference is unpinned, leaving a modest reproducibility and integrity gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aphiria/reflection Version 1.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.