The package includes tests, a README, and a focused 14-file source tree, which supports straightforward use. A single publisher and limited repository activity leave less evidence of ongoing maintenance or rapid issue response.
58%
Total Score
67
81
88
Only one registry account has publish access, which creates a thin publishing base and increases continuity risk. The linked repository is user-owned rather than organization-backed, so no compensating organizational capacity is shown.
The latest release was April 29, 2024, with no releases in the last 12 months despite the package being about 2 years and 9 months old. This is meaningful evidence of slowing maintenance, although the stable version and small scope partly reduce the concern.
There were no new or closed issues or pull requests in the last month, and no open work is recorded. With the old last-push date, this provides little evidence of active maintenance or responsiveness.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is not required for a healthy small package, but these low adoption signals provide no additional evidence of community support alongside the stale activity.
Composer build tooling is present, but no security scanning tools are reported. This is a modest transparency and maintenance gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^6.0 | — | — |
symfony/dom-crawler Version ^2.8.8 | — | — |
topthink/think-helper Version ~1.0 | — | — |
topthink/think-installer Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.