The repository includes tests, a matching project, and a clear MIT license. Its small audience and limited security practices leave less evidence of ongoing support for a production dependency.
42%
Total Score
50
50
78
50
This package has made only one release, on April 22, 2020, and none in the following six years. That is strong evidence of abandonment risk despite the repository remaining available.
The package declares three runtime dependencies, including PHPUnit and Mockery, which are normally development tools and may indicate an imprecise dependency setup. The dependency count itself is small.
Only one registry account has publish access. That is a limited publishing base for a package with no demonstrated release activity, although the repository owner matches that account.
The package and repository are both backed by the same individual account, so ownership is consistent. Individual ownership still leaves a narrow apparent support base.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of community adoption or external review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mockery/mockery Version ^1.3 | — | — |
phpunit/phpunit Version ^9.1 | — | — |
guzzlehttp/guzzle Version ^6.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.