Unfit to use: the package is explicitly abandoned on Packagist and has had no release in 440 days. It also has no README for consumers and remains at an early 0.0.3 version, despite having an MIT license and tests.
15%
Total Score
40
100
Packagist marks the entire package as abandoned and names mwx/lib as its replacement, making continued adoption a severe maintenance risk.
The package has only three releases, all clustered within about six hours, followed by no releases in the last 12 months; this provides little evidence of ongoing maintenance.
The artifact includes tests, which is a small positive, but it has no README, leaving consumers without essential integration and usage guidance for this library.
The latest release is 0.0.3 and is not a stable major version, which indicates an early API and maturity stage. No prerelease labeling partly reduces the concern, but does not offset the abandonment signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^v7.3 | — | — |
robmorgan/phinx Version ^0.16.9 | — | — |
symfony/console Version ^7.3 | — | — |
symfony/process Version ^v7.3 | — | — |
czproject/git-php Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.