The package is easy to inspect and has a clear README, repository tests, and a focused dependency set. It is not deprecated or archived, but ongoing maintenance should not be expected.
42%
Total Score
50
100
71
75
The latest release was published in February 2019, with no releases in the last 12 months. This long period without updates is a significant maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in January 2021. This supports a strong abandonment concern.
The repository uses Composer, but no security scanning tools were detected. Composer provides ordinary build tooling; the missing scanning is a minor hygiene gap rather than a decisive health issue.
The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is a secondary concern compared with the prolonged inactivity.
The release is not marked as a prerelease, but it remains on the 0.x minor version line, so API stability may be less predictable than for a stable-major package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
it-for-free/rusphp Version v2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.