Documentation and licensing are clear, and the package has tests plus frequent releases. Its only maintainer owns all recent commits and the project has no security policy, so maintenance continuity depends heavily on one person.
82%
Total Score
50
50
89
88
The package declares one runtime dependency, phpunit/phpunit, with no development dependencies. A test framework as a runtime dependency is unusual and may increase consumers' dependency surface.
The repository is owned by an individual user rather than an organization. That makes the observed single-maintainer concentration more consequential because there is no organizational handoff evidence.
One contributor made all 4 commits in the last 3 months, giving the project a 100% top-contributor share. This creates a meaningful continuity risk if that person becomes unavailable.
There were 4 commits in the last 3 months from one active maintainer. Recent work is present, but the volume is modest for a package releasing frequently.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide little external confirmation of adoption or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^9.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.