Manage Node resources from PHP
58%
Total Score
50
100
81
50
A post-install-cmd script runs during Composer installation, adding installation-time behavior that developers should account for, although this alone is not evidence of poor maintenance.
The registry lists one publishing maintainer. The matching source repository provides some continuity, but the narrow publisher base leaves little visible redundancy.
The registry namespace and repository owner match, which supports source ownership. The owner is an individual account rather than an organization, so there is no demonstrated organizational backing to offset the thin maintainer base.
Only 2 releases appeared in the last 12 months, despite 22 releases overall; this indicates a noticeably slower release cadence and raises maintenance concerns.
There were 0 commits and 0 active maintainers in the last 3 months, which is a concrete sign of currently inactive development and increases abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
clue/socket-raw Version ^1.2 | — | — |
symfony/process Version ^3.3 || ^4.0 || ^5.0 || ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.