Usable with caveats: this is a mature, licensed package with a recent stable release, release notes, documentation, and repository tests. However, the repository had no commits, issue activity, or merged pull requests in the last 3 months, and it lacks a security policy.
70%
Total Score
50
50
94
67
The package has six runtime dependencies, including Symfony and Doctrine components. This is a moderate dependency surface that adds maintenance exposure but is reasonable for a PHP testing utility.
The repository recorded zero commits and zero active maintainers in the last 3 months. The recent registry release and same-day repository push are compensating evidence, but the short-term development inactivity remains a maintenance concern.
There were no new or closed issues and no new or merged pull requests in the last 3 months, despite 10 open issues and 6 open pull requests; this indicates limited recent project interaction.
Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a transparency gap, though it is not by itself evidence that the package is unsafe.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^5.4|^6.4|^7.4|^8.0 | — | — |
symfony/process Version ^5.4|^6.4|^7.4|^8.0 | — | — |
symfony/stopwatch Version ^5.4|^6.4|^7.4|^8.0 | — | — |
doctrine/collections Version ^1.2|^2.0 | — | — |
symfony/deprecation-contracts Version ^2.1|^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.