Clear documentation, tests, licensing, and organization backing support adoption. The tiny user base, missing security policy, and unpinned CI actions leave less assurance around long-term resilience.
65%
Total Score
75
100
83
83
The package has existed since 2013 with 23 releases, but it had no releases in the last 12 months and its latest release was about 16 months ago, weakening maintenance confidence.
There were zero commits and zero active maintainers in the last 3 months, which is a concrete sign of currently limited maintenance activity.
There were no new or merged pull requests in the last month and no recorded issue activity; this is consistent with a small, quiet project but offers little evidence of ongoing support.
The repository has only 3 stars, 2 forks, and 1 watcher, indicating a very small user and contributor audience and less external resilience.
The project uses Composer for builds, but no security scanning tools were detected, leaving a modest gap in repository assurance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^10.4 | ^11 || ^12 | — | — |
covergenius/php-vcr Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.