Recent releases, a working test suite, and an active repository provide useful support. The license mismatch and unpinned workflow actions add avoidable uncertainty.
48%
Total Score
50
75
50
Packagist marks the entire package as abandoned and names jord-jd/php-cli-progress-bar as its replacement. This is a major adoption and maintenance warning despite recent activity.
The artifact includes a license file, but it was detected as GPL-3.0 while the manifest declares LGPL-3.0-only. The mismatch should be resolved before adoption.
One contributor made all recent commits, leaving maintenance dependent on a single active person. The user-owned project has no organizational backing shown to compensate for that concentration.
Only one commit was recorded in the last three months. That shows some activity, but the low volume provides limited evidence of sustained maintenance capacity.
The repository has no security policy. For a small command-line library this is a transparency gap, though it is less significant than the package's abandonment status.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
khill/php-duration Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.