The package includes a README, repository tests, and release notes, but its dependency metadata is poorly separated and no security policy is provided. Its small, inactive project footprint offers little support when compatibility or security issues arise.
38%
Total Score
0
50
75
50
Only two releases were published, both in April 2020, and there has been no release for about six years. That leaves little evidence of continued maintenance despite the stable 1.0.0 version.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for about six years.
The package declares four runtime dependencies, including PHPUnit and Mockery, while declaring no development dependencies. Treating test tooling as runtime dependencies is an avoidable packaging-quality concern.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counts provide no meaningful supporting evidence for project maturity or active use.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less serious than the clear inactivity signals.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
mockery/mockery Version ^1.3 | — | — |
phpunit/phpunit Version ~5 | — | — |
guzzlehttp/guzzle Version ^6.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.