Risky to adopt: the package has had no release or repository activity for more than six years. It is licensed, documented, and backed by a matching organization repository, but its maintenance appears effectively abandoned.
43%
Total Score
63
50
75
88
The latest release was published on January 9, 2020, with no releases in the last 12 months; more than six years without a release is a strong abandonment concern despite 17 historical releases.
There were zero commits and zero active maintainers in the last three months, consistent with the release history and indicating that fixes and compatibility updates are unlikely.
The package declares 13 runtime dependencies, including several development and analysis-oriented tools, making the dependency footprint relatively broad for a command-line helper and increasing maintenance exposure.
Two issues remain open, with no new or closed issues and no pull-request activity in the last month, providing no evidence of active issue maintenance.
Composer build tooling is present, but no security-scanning tooling was detected. This is a secondary transparency gap, especially alongside the repository's long inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpstan/phpstan Version ^0.12.4 | — | — |
phpunit/phpunit Version ^8.0 | — | — |
symfony/console Version ^4.4 | — | — |
symfony/process Version ^4.4 | — | — |
php-school/cli-menu Version ^3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.