The MIT license, matching repository, and clear README support straightforward use. However, there have been no commits in the last three months and no release for about 20 months, while the repository has no security policy or automated security scanning.
58%
Total Score
50
88
75
The package has 24 releases since May 2019, but none in the last 12 months and its latest release was about 20 months ago, which raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has currently stalled.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less clear for a package used in development workflows.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpmd/phpmd Version ^2.10 | — | — |
phpro/grumphp Version ^2.3 | — | — |
larastan/larastan Version ^3.0 | — | — |
squizlabs/php_codesniffer Version ^3.7 | — | — |
php-parallel-lint/php-parallel-lint Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.