The project has a clear README, repository tests, release notes, and only one runtime dependency. Nearly four months without commits, a single registry maintainer, no security policy, and six unpinned workflow actions add meaningful maintenance and build-hygiene concerns.
64%
Total Score
25
100
81
50
The repository had zero commits and zero active maintainers in the last three months; with the last push nearly four months ago, this is a meaningful sign of slowing or paused maintenance.
One registry maintainer creates a thin publishing base, although the linked repository shows an identifiable individual owner rather than anonymous or unclear ownership.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad support community.
Composer is used for the build, which is appropriate for this PHP package, but no security-scanning tools are configured.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-di/php-di Version ^7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.