It has a clear MIT license, extensive tests, and a recent release with notes. The small project has no security scanning, so pin this version and watch for renewed maintenance.
78%
Total Score
67
94
100
There were no commits and no active maintainers in the last three months. This is a meaningful maintenance pause, although the package has a recent release and repository push.
There was no issue or pull-request activity in the last month, with one open issue and one open pull request. This is a mild sign of limited current engagement, but not evidence of abandonment by itself.
Composer build tooling is present, but no security-scanning tools were detected. That leaves a transparency and maintenance-hygiene gap for a dependency project.
The only workflow was fully analyzed, uses read-only permissions, and has no reported dangerous sinks or audit findings. However, all four action references are unpinned, leaving avoidable supply-chain drift risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
doctrine/inflector Version ^2.0 | — | — |
phpdocumentor/type-resolver Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.