Documentation, tests, release notes, licensing, and a security policy are all present. Six workflow dependencies are unpinned, and the single maintainer leaves limited redundancy.
62%
Total Score
50
88
83
Only one registry account has publish access, which limits publishing redundancy; the linked repository and package identity match, providing some ownership consistency.
The package has 32 releases since March 2022, but none in the last 18 months, which raises maintenance concerns for a dependency despite its earlier release cadence.
The repository recorded no commits and no active maintainers in the last 3 months, indicating currently limited visible development activity; the recent repository push provides only partial reassurance.
There were no new or closed issues or pull requests in the last month, while 24 issues remain open, reinforcing the signs of a currently quiet project.
The assessed release is v3.0.0-alpha2, so it carries prerelease compatibility risk even though the project has an established release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 | — | — |
nikic/php-parser Version ^5.3 | — | — |
cspray/annotated-target Version ^v2.0.0.alpha | — | — |
cspray/precision-stopwatch Version ^0.2.0 | — | — |
cspray/architectural-decision Version ^3.0.0.alpha | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.