This is a small, single-maintainer tool without a security policy, though it has tests, clear documentation, a matching repository, and a license. Pin this version if its behavior fits your PHP-CS-Fixer workflow.
62%
Total Score
50
100
75
88
Only one registry account has publish access. The matching user-owned repository confirms a real owner, but the narrow maintainer base increases continuity risk.
The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it provides no organizational continuity if the maintainer stops work.
The package has only 3 releases, all clustered over about 5 days, and none in the last 12 months despite being 18 months old. This suggests a project that may have stopped after its initial development.
There were 0 commits and 0 active maintainers in the last 3 months, consistent with the package's lack of recent releases. This materially raises maintenance risk.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these counts provide little external evidence of maturity or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
friendsofphp/php-cs-fixer Version ^3.60 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.