The package includes tests, a usable README, and an MIT license file. Its tiny user base and lack of a security policy provide little supporting evidence for long-term maintenance.
38%
Total Score
50
69
75
The package has seven releases, but its latest release was on February 13, 2019, with no releases in the last 12 months. More than seven years without a release is strong abandonment evidence.
There were zero commits and zero active maintainers in the last three months, consistent with the more than seven-year release gap and indicating no observable ongoing maintenance.
The repository has one star and no forks, offering very little external adoption or community support. Popularity is supporting evidence rather than decisive on its own.
The repository uses Composer for builds, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap, not evidence that the package is unsafe by itself.
The repository has no security policy, leaving no documented channel or process for handling vulnerabilities. Combined with the absent recent maintenance, this weakens confidence in support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phalcon/zephir Version 0.8.* | — | — |
symfony/console Version 2.7.* | — | — |
nikic/php-parser Version 1.4.* | — | — |
phpdocumentor/reflection-docblock Version 2.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.