The package is narrowly scoped and clearly licensed, with a matching repository and a readable package description. Its maintenance has stopped since December 2023, and eight runtime dependencies add upkeep for such a small helper.
54%
Total Score
50
50
69
75
The package declares eight runtime dependencies, including the framework, helper packages, queue, captcha, and Symfony VarDumper. That is a substantial upkeep surface for a package containing only one source file.
Only one registry account has publish access. Because the repository is owned by the same individual, this is consistent ownership rather than an administrative mismatch, but it leaves little visible publishing redundancy.
The package has had no release in nearly three years: its latest release was December 22, 2023, despite seven releases overall. The earlier release cadence shows initial activity but does not offset the prolonged pause.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest push, this is strong evidence that maintenance has stalled.
The repository has zero stars and forks and one watcher, indicating little visible adoption or outside support. Popularity is only supporting evidence, but it offers no compensating maintenance signal here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
leftsky/php-help Version ^0.0.3 | — | — |
symfony/var-dumper Version ^5.4 | — | — |
topthink/framework Version dev-master | — | — |
topthink/think-queue Version 1.1.6 | — | — |
topthink/think-helper Version ^1.0.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.