The repository has tests, a clear README, an MIT license, and no install-time scripts. Its last release and commit were about three and a half years ago, while all three workflow actions are unpinned and no security policy is present.
58%
Total Score
50
81
67
There were no commits and no active maintainers in the last three months, indicating that current maintenance capacity is absent or very limited.
The package has 38 releases, but none in the last three years and six months; the long release gap raises abandonment and compatibility-maintenance concerns.
There are no new or closed issues in the last month and one open pull request, providing no evidence of ongoing issue resolution.
Composer and Phing provide build tooling, but no security-scanning tool is configured, leaving a modest transparency and maintenance gap.
The linked repository is not archived, but its last push was about three years and six months ago, consistent with the observed maintenance slowdown.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slevomat/coding-standard Version ~8.0 | — | — |
squizlabs/php_codesniffer Version ~3.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.