It has a clear MIT license, release notes, a matching repository, and a security policy. Its small project has little adoption, so future support may be limited.
58%
Total Score
75
86
83
The package has 10 releases since October 2021, but none in the last 12 months and its latest release was January 16, 2024. This indicates a substantial maintenance gap for a package assessed in 2026.
The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the long period since the latest release rather than showing ongoing maintenance.
The repository has 0 stars and 0 forks, with only 3 watchers. Popularity is not decisive, but these numbers provide little evidence of a broad user or contributor community.
All 3 analyzed workflows use unpinned actions, which weakens build reproducibility and update control. The pull_request_target workflow has no untrusted checkout or script-injection finding, and no high- or medium-severity audit findings were reported.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brain/monkey Version ^2.0 | — | — |
phpunit/phpunit Version ^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.