Clear licensing, documentation, repository tests, and no install-time scripts make adoption straightforward. Low community uptake and absent automated security scanning leave continuity dependent on the current maintainer.
78%
Total Score
88
100
78
100
The project has 13 releases over about 2 years and a latest release in July 2026, but only one release in the last 12 months indicates a relatively slow cadence.
All 23 recent commits came from one contributor, creating a genuine continuity risk; organizational ownership provides some ability to hand off maintenance but does not remove the concentration.
The repository has only 1 star and no forks, indicating limited external adoption; this is supporting caution rather than evidence of abandonment because recent commits are active.
Composer build tooling is present, but no automated security scanning tools were detected, leaving a modest transparency and maintenance gap.
Version 0.3.6 is not a prerelease, but the pre-1.0 major version signals less compatibility maturity than a stable major release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
friendsofphp/php-cs-fixer Version ^3.87 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.