The MIT declaration and repository tests provide a useful baseline, and no install-time scripts reduce integration risk. Three runtime dependencies, including PHPUnit and Mockery, make the package setup less tidy.
43%
Total Score
25
50
67
100
The package has only one release, published on April 29, 2019, with no releases in roughly 7 years and 5 months. This is strong evidence of abandonment risk.
The repository recorded no commits or active maintainers in the last 3 months, and its last push was roughly 6 years ago. That provides little evidence of ongoing maintenance.
The package declares three runtime dependencies, including PHPUnit and Mockery, which are normally development tools. That makes the dependency profile less focused and may add avoidable installation and maintenance burden.
A single registry maintainer is a thin publishing base. The repository is user-owned rather than organization-backed, so there is no provided evidence of broader maintenance capacity.
The artifact includes a README and the repository has tests, while release notes document this version. However, the README is only 148 characters and leaves usage marked TODO, limiting consumer transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mockery/mockery Version ^1.2 | — | — |
phpunit/phpunit Version ^8.1 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.