The artifact includes tests, a readme, and an MIT declaration. A single registry maintainer and PHPUnit listed as a runtime dependency add modest packaging and continuity concerns.
47%
Total Score
50
50
80
100
This is the package's only release, published nearly five years ago, with no releases in the last 12 months. That leaves maintenance and abandonment risk unresolved.
The package declares two runtime dependencies, including phpunit/phpunit. Shipping PHPUnit as a runtime dependency is unusual for a production library and adds packaging concern.
Only one account has registry publish access. This does not prove inactivity, but it indicates a thin publishing base and limited continuity if that maintainer stops work.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/uri Version ^6.5 | — | — |
phpunit/phpunit Version ^9.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.