Unfit to use: Packagist marks this package abandoned, and its repository is archived with no release in about six years. Clear licensing, repository tests, and release notes are positive, but they do not offset the strong abandonment risk.
15%
Total Score
0
57
50
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption and maintenance warning.
The package has only three releases and none in about six years; the latest release was published in December 2019. That long release gap indicates likely abandonment.
The repository recorded no commits and no active maintainers during the last three months. Together with the archived status, this confirms the lack of current maintenance.
The linked source repository is archived, indicating that active development has ended. This strongly increases the risk of unresolved defects and incompatibility.
One of five workflows uses pull_request_target, which can require careful handling of untrusted pull requests. No untrusted checkout or script-injection patterns were detected, so this is a limited concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sebastian/diff Version ^3.0.2 | — | — |
phpunit/phpunit Version ^8.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.