The package has a clear README, an MIT declaration, and no install-time scripts. Its last release was over 11 years ago, with no recent commits and only two releases overall, making abandonment the main concern.
38%
Total Score
25
58
75
Only two releases exist, with the latest published over 11 years ago and none in the last 12 months. This is strong evidence of an effectively inactive release line.
There were no commits and no active maintainers in the last three months. Combined with the old last push, this indicates no current maintenance capacity.
There was no issue or pull-request activity in the last month. With no recent commits or releases, the lack of activity reinforces the abandonment concern rather than showing orderly maintenance.
Composer build tooling is present, but no security-scanning tools are reported. The build setup is a small positive, while the missing scanning reduces maintenance transparency.
The linked repository is not archived, which leaves a path for maintenance, but its last push was over 11 years ago. The non-archived status only partly offsets the age of the source.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzle/guzzle Version ~3.9 | — | — |
mnapoli/php-di Version ~4.4 | — | — |
beberlei/assert Version ~2.1 | — | — |
phpspec/phpspec Version ~2.0 | — | — |
beberlei/lite-cqrs Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.