Picky standards for PHP projects
62%
Total Score
50
100
94
50
Only one account has registry publishing access. Because the repository owner is an individual rather than an organization, this indicates a thin publishing and succession base.
The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, even though the repository is not archived and recent release history is strong.
There were no new or closed issues or pull requests during the last month, with three issues and three pull requests still open. This adds evidence of limited recent project interaction.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The presence of Sonar and Psalm partially supports engineering hygiene but does not replace a reporting policy.
Version v0.34.0 is not a prerelease, and recent releases contain no prerelease versions. The 0.x major version still indicates an API that may evolve before 1.0.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpmd/phpmd Version ^2.15 | — | — |
vimeo/psalm Version ^6.14 | — | — |
symfony/yaml Version ^7.4 | — | — |
phpstan/phpstan Version ^2.1 | — | — |
phpunit/phpunit Version ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.