Usable with caveats: the package is clearly identified, licensed, and not deprecated, but its last registry release was nearly six years ago and repository activity has been inactive for the past three months. The project is small and lacks tests, security scanning, and a security policy.
58%
Total Score
50
50
83
83
The package has four runtime dependencies, including PHP tooling and Doctrine coding standards. This is a meaningful integration surface for a small coding-standard package, though the dependencies are directly relevant to its purpose.
One registry account publishes the package. That is consistent with the individual repository ownership, but it leaves a narrow publishing and maintenance base.
The registry namespace and repository owner match, and the project is owned by an individual rather than an organization. The matching ownership supports authenticity, but the single-owner structure limits visible backing capacity.
The package has nine releases since 2019, but its latest registry release was in October 2020 and there have been no releases in nearly six years. That makes compatibility and ongoing maintenance less certain.
There were no commits and no active maintainers during the past three months. The recent repository push is some compensating evidence, but the current activity still provides limited proof of sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/coding-standard Version ^8.1 | — | — |
squizlabs/php_codesniffer Version ^3.4 | — | — |
dealerdirect/phpcodesniffer-composer-installer Version ^0.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.