Its narrow scope, clear README, and MIT license make the package easy to evaluate. Maintenance has stopped for over nine years, with no recent releases or repository activity, and there is no security policy. The zero-star repository also provides little evidence of ongoing community use.
42%
Total Score
58
75
The package has had only two releases, with none in the last 12 months; its latest release was over nine years ago. This is strong evidence of abandonment risk, despite the stable version format.
The repository is not formally archived, but its last push was over nine years ago, so the unarchived status does not compensate for the prolonged inactivity.
The repository has zero stars, forks, and watchers, offering no supporting evidence of community adoption or external maintenance. Popularity is only supporting evidence, so this reinforces rather than determines the result.
No security policy was found. For a small PHP ruleset package this is a meaningful transparency gap, although it is less serious than for software handling sensitive data.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpmd/phpmd Version ~2.6 | — | — |
squizlabs/php_codesniffer Version ~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.