Tests are present in the repository, and this release has GitHub release notes documenting its compatibility update. The two-release history, no recent commits, and five unpinned workflow actions leave maintenance and build-reproducibility concerns.
60%
Total Score
50
50
81
75
Seven runtime dependencies, including coding-standard extensions and Symfony YAML, create a meaningful dependency surface for a PHP code-quality library, though the profile is consistent with its stated function.
The package is backed by an individual repository owner rather than an organization, so the short release and maintainer history provides little evidence of sustained organizational support.
The package has only 2 releases, both published within about 8 hours, and no later release activity over roughly 11 months; this suggests a very limited maintenance record.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no observed ongoing maintenance after the initial release burst.
The repository has 0 stars, forks, and watchers. This is supporting evidence of limited adoption, but it is not decisive against a small package by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version >=3.4.0 | — | — |
slevomat/coding-standard Version ^8.11 | — | — |
squizlabs/php_codesniffer Version ^4.0 | — | — |
sirbrillig/phpcs-variable-analysis Version ^2.11.7 | — | — |
dealerdirect/phpcodesniffer-composer-installer Version ^0.7.1 || ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.