The project has enough structure for a small PHP dependency. Recent maintenance is light and concentrated in one contributor, while every analyzed workflow uses unpinned actions.
68%
Total Score
50
88
100
The package and repository are owned by the same individual account rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.
The package has six releases over about 19 months, but only one release in the last 12 months; the latest release is recent, so this is a mild maintenance concern rather than abandonment evidence.
All two recent commits came from one contributor, leaving maintenance dependent on a single active person.
The repository had two commits in the last three months, indicating some ongoing work but a light maintenance cadence.
The project uses Composer build tooling but reports no security-scanning tools, leaving less automated coverage for dependency and code risks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^9.0 | — | — |
fakerphp/faker Version ^1.0 | — | — |
cable8mm/enum-getter Version ^2.0 | — | — |
phpoffice/phpspreadsheet Version ^5.0 | — | — |
mbezhanov/faker-provider-collection Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.