The package is licensed, tested, documented, and has no install-time scripts. Its last release was over five years ago, repository activity has stopped recently, and all four workflow actions are unpinned.
54%
Total Score
25
81
75
The latest release was published on 2021-01-15, with no releases in the previous 12 months, indicating a long period without versioned maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, indicating no current development activity.
There were no new or closed issues or pull requests in the last month, while three issues and two pull requests remain open; this is consistent with limited recent maintenance.
Composer is used for the build, but no security scanning tooling is present; this is a modest transparency and maintenance gap rather than a standalone severe risk.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package intended to be added to development tooling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
behat/behat Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.