The artifact includes a README, tests, an MIT license file, and no install-time scripts. Its small publishing footprint and absent security policy provide little additional support for long-term maintenance.
39%
Total Score
50
75
75
The package has had no releases in the last 12 months, and its latest release was published in October 2016. This is strong evidence of abandonment for a package that may need compatibility fixes.
There were zero commits and zero active maintainers in the last three months, consistent with the last push occurring in October 2016. This materially increases abandonment and compatibility risk.
The repository has zero stars and forks and only one watcher. Popularity is not decisive by itself, but these counters provide little supporting evidence for project maturity.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance weakness.
The repository has no security policy. For a package that processes source code, this leaves vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phalcon/zephir Version 0.8.* | — | — |
symfony/console Version 2.7.* | — | — |
nikic/php-parser Version 1.4.* | — | — |
phpdocumentor/reflection-docblock Version 2.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.