Usable with caveats: the package is not deprecated or archived, has a matching repository, tests, and a small dependency surface. However, no commits or active maintainers were recorded in the last three months, and the project lacks a README in the artifact and a security policy.
58%
Total Score
33
100
69
80
The repository recorded zero commits and zero active maintainers over the last three months. For a package released only about five months ago, that is a meaningful maintenance and abandonment concern.
The artifact has no README, which makes integration harder for a WordPress framework, but the repository has tests and this exact version has GitHub release notes. Missing tests and changelog files in the published artifact are normal packaging practice.
The package is backed by the matching repository of the individual registry owner, Bob Moore. This provides direct ownership context, although it does not provide the resilience of a larger organization.
The package is young at 147 days and has 10 releases, with a median interval of about 20 hours. This shows active early development, but the short history provides limited evidence of long-term stability.
There were no new or closed issues or pull requests in the last month, and no open issues or pull requests. This is consistent with a very small project, but provides no evidence of an active user or maintainer community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-di/php-di Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.