Documentation, licensing, and repository identity are clear, and the package has a small dependency surface. Its source is archived and the package is deprecated, with no releases or commits for years; use ergebnis/php-cs-fixer-config instead.
8%
Total Score
0
44
67
The package is marked as borrowing the identity of the much more downloaded localheinz/diff package, despite no artifact overlap or README identification as a fork. Consumers may have intended the lookalike package instead.
Packagist marks the entire package as abandoned and names ergebnis/php-cs-fixer-config as its replacement, directly warning that consumers should migrate.
The package has 46 releases and historically released about every 12 days, but it has had no release in roughly 6 years and 10 months. That long lapse indicates abandonment risk.
There were no commits and no active maintainers in the last 3 months, consistent with the archived repository and indicating no current maintenance capacity.
The linked repository is archived and was last pushed roughly 6 years and 10 months ago, so normal maintenance and issue response should not be expected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
friendsofphp/php-cs-fixer Version ~2.16.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.