Usable with caveats: the repository is active and the package includes a README, tests, and a small focused dependency set, but this release is the only published version and is over two years old. Verify compatibility with current GrumPHP and monorepo-builder before adopting it.
62%
Total Score
67
100
78
88
The package and repository are tied to a user-owned namespace rather than an organization-backed project. That does not imply poor quality, but it provides less demonstrated organizational continuity.
Only one release exists, published over two years ago, with no releases in the last 12 months. This leaves compatibility and maintenance maturity largely unproven despite the repository being present.
There were no commits and no active maintainers in the last 3 months. Combined with the single old registry release, this is a real maintenance concern, although the repository's more recent push shows it has not been abandoned outright.
The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of mature adoption.
The repository uses Composer, but no security scanning tools were detected. For this small PHP integration package, the missing scanning automation is a transparency gap rather than a severe adoption blocker.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpro/grumphp Version ^2.6 | — | — |
symplify/monorepo-builder Version ^11.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.