Risky to adopt: this package has had no release or repository update for about nine years, and its proprietary license limits safe reuse despite a structured codebase and tests. It may still work for legacy PHP 5.4 projects, but it is not a dependable modern dependency.
38%
Total Score
100
100
50
83
The manifest declares a proprietary license and no license file was found, creating a significant legal and redistribution concern for an open-source dependency. The copyright notice in the README does not provide an open-source license.
The package has only one release, published about nine years ago, with no releases in the last 12 months. That is strong evidence of abandonment and outweighs the otherwise stable 1.0.0 version.
The repository has zero stars and forks and only two watchers, offering little community evidence to support ongoing maintenance. Low popularity alone is not decisive for a small package, so this is supporting caution rather than a severe risk.
Composer and Phing build tooling are present, showing some release structure, but no security scanning tools are configured. Given the package's age, the absence of current security tooling adds a modest transparency concern.
The repository is not formally archived, which is a modest positive, but it was last pushed about nine years ago. The lack of recent repository activity still indicates substantial abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
myclabs/php-enum Version ~1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.