The package has a clear README, a real source tree, an MIT license, and a documented GitHub release. Its dependency set is substantial for a tooling package, while the repository lacks a security policy and automated security scanning.
70%
Total Score
50
50
83
83
Twelve runtime dependencies, including several large analysis and formatting tools, create a comparatively broad dependency surface for a configuration and runner package.
The repository is owned by an individual account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
One contributor made all three commits in the last three months, leaving maintenance dependent on a single active person.
Three commits in the last three months show recent activity, but the volume is modest for a young project.
Zero stars and one fork provide little external adoption evidence, though popularity is only supporting evidence and does not outweigh the active release history.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpmd/phpmd Version ^3.0@dev | — | — |
rector/rector Version ^2.6 | — | — |
phpstan/phpstan Version ^2.2 | — | — |
symfony/console Version ^8.1 | — | — |
symfony/filesystem Version ^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.