Tests, documentation, and licensing are present, and the repository matches the package. The alpha release has seen no registry or commit activity since 2016, leaving maintenance and compatibility risk for new projects.
38%
Total Score
33
100
69
83
Only four releases were published, all in April 2016, with no releases in the last 12 months; this is strong evidence of abandonment risk.
There were zero commits and zero active maintainers in the last three months, reinforcing that the project has effectively stopped receiving maintenance.
The repository is owned by an individual rather than an organization, so the single registry maintainer is consistent with the available backing context but offers limited redundancy.
There are no open issues or pull requests, and no recent issue or pull-request activity; combined with the old release history, this provides no evidence of active maintenance.
Composer build tooling is present, but no security scanning tooling is configured; this is a modest transparency and maintenance gap rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-di/php-di Version ^5.2 | — | — |
mockery/mockery Version 0.9.* | — | — |
symfony/console Version ^2.5 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.