72%
Total Score
caution
Usable with caveats: maintenance has gone quiet recently despite a stable release history and clear organizational ownership.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release and last push provide some context, but current maintenance activity is limited.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this provides little external assurance or review signal.
Composer is used for builds, but no security-scanning tools were detected. That is a modest transparency and assurance gap for dependency maintenance.
No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.
No GitHub Actions workflows were present, so the audit found no workflow hazards or unpinned actions. This also means there is no observed automated workflow coverage to support maintenance assurance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
slevomat/coding-standard Version ^8.22 | — | — |
friendsofphp/php-cs-fixer Version ^3.88 | — | — |
squizlabs/php_codesniffer Version ^3.13 | — | — |
kubawerlos/php-cs-fixer-custom-fixers Version ^3.35 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.