The package includes a readme, tests, an explicit license, and no install-time scripts. Its minimal scope may reduce integration risk, but ongoing maintenance and security oversight are unclear.
38%
Total Score
38
50
61
83
There has been only one release, published over eight years ago, with no releases in the past 12 months. This is strong evidence of an unmaintained package.
There were zero commits and zero active maintainers in the past three months, reinforcing the release history's evidence of long-term dormancy.
The repository is not archived, but its last push was over eight years ago. The unarchived status does not compensate for the prolonged inactivity.
The package declares only two runtime dependencies, PHP and PHPUnit, indicating a limited dependency surface. The inclusion of PHPUnit as a runtime dependency is unusual but not enough alone to indicate abandonment.
One registry account has publish access. This is a thin publishing base, although the linked repository is owned by the same individual, so it does not independently establish project abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.