The package has a clear README, tests, MIT licensing, and no install-time scripts. Its small dependency setup is offset by the lack of security scanning and the project’s very limited adoption signals.
38%
Total Score
0
50
69
50
The last release was in January 2018, with no releases in the last 12 months despite the package being over eight years old. Six releases show an initial publication history, but not ongoing maintenance.
The repository recorded no commits and no active maintainers in the last three months, consistent with the last push in January 2018. This is strong evidence that maintenance has stopped.
The package declares only one runtime dependency, keeping the dependency surface small. That dependency is phpunit/phpunit, which is unusual as a runtime dependency and merits checking because it may unnecessarily affect consumers.
The repository has zero stars and forks and one watcher, providing little evidence of community review or shared maintenance capacity. Popularity is supporting evidence only, so this reinforces but does not independently establish abandonment.
Composer build tooling is present, but no security scanning tools were detected. This weakens the project’s ongoing maintenance and transparency posture, although it is not by itself evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version 6.5.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.