A clear MIT license, reproducible build tooling, and a clean workflow audit improve confidence. The missing security policy and no commits in the last three months are modest maintenance concerns, despite the recent release activity.
84%
Total Score
83
100
75
No commits and no active maintainers were recorded in the last three months, which is a maintenance warning, but it is partly offset by 8 registry releases in the last year and a recent repository push.
No security policy was found in the repository, leaving vulnerability-reporting expectations less transparent for a maintained developer tool.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webmozart/glob Version ^4.7.0 | — | — |
symfony/console Version ^8.0.7 | — | — |
nikic/php-parser Version ^5.7.0 | — | — |
php-standard-library/php-standard-library Version ^6.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.