The MIT license, stable versioning, and install behavior are reassuring. The package has a useful README, but its repository could not be found, limiting verification of maintenance and provenance.
58%
Total Score
50
50
90
100
The package declares 18 runtime dependencies, including extensive testing, analysis, and tooling packages. That is an unusually broad runtime footprint and increases dependency and maintenance burden.
Only one registry account has publish access, leaving the release process dependent on a single maintainer and increasing bus-factor risk.
The package has 61 releases over roughly 3 years, but no releases in the last 12 months despite a prior median interval of about 7 days. That suggests maintenance has stopped or slowed sharply.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pestphp/pest Version 3.0.3 | — | — |
mockery/mockery Version 1.6.12 | — | — |
phpstan/phpstan Version 2.1.22 | — | — |
robmorgan/phinx Version 0.16.10 | — | — |
codeception/codeception Version 5.3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.