Usable with caveats: the package is licensed, documented, tested, and not deprecated or archived. However, it has had no release or repository commit activity for more than two years, with very little community adoption and no security policy.
61%
Total Score
50
78
90
The package has only four releases and none in the last two years; its last release was more than two years ago. This materially raises abandonment risk despite the regular early release intervals.
There have been no commits and no active maintainers in the last three months, consistent with the package's prolonged release gap and indicating weak ongoing maintenance.
The repository has only 1 star, 0 forks, and 1 watcher, so there is little visible community adoption or external review to compensate for the inactivity.
Composer build tooling is present, but no security-scanning tool is configured. This is a modest transparency and assurance gap rather than evidence that the package is unsafe.
The linked repository is not archived, although its last push was more than two years ago; the active status provides some reassurance but does not offset the stale activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
darling/php-text-types Version ^1.1 | — | — |
darling/php-darling-dev-tools Version ^1.0 | — | — |
darling/php-unit-test-utilities Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.