Production-grade MCP server that exposes Xdebug step debugging via DBGp as typed, safe, model-friendly tools and resources for AI coding agents.
68%
Total Score
caution
Usable with caveats: four releases arrived in one burst, with no commits in three months and all workflow actions unpinned.
The package and repository are owned by the same individual account. This is coherent ownership, though it does not provide the resilience of organization backing.
There are four releases in the package's first 28 minutes, with a median interval of about 10 minutes. This shows active initial publishing but does not yet demonstrate a sustained release cadence.
The repository records zero commits and zero active maintainers in the last three months. For a package only about five months old, this leaves maintenance continuity unproven and raises abandonment risk.
Composer is used as the build tool, but no security scanning tool was detected. The missing scanner is a modest transparency gap, while the repository's tests and security policy provide some compensation.
Version v0.2.2 is not a prerelease, but the package remains below major version 1 and has only a short release history. That limits evidence of maturity without making the release unsuitable by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
php-mcp/server Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.