Intelligently merge PHP files and dependencies into a single file
68%
Total Score
caution
A young project with no commits in the last three months and no security scanning has limited maintenance evidence.
The package is about 4 months old with 6 releases, all published within one day; this shows initial activity but little evidence of sustained maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, leaving limited evidence of ongoing maintenance after the initial releases.
Composer is used for builds, but no security scanning tools are configured, reducing automated visibility into dependency and source risks.
The repository has no security policy, which weakens vulnerability-reporting transparency for a tool that processes and builds PHP code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^6.0 || ^7.0 | — | — |
symfony/console Version ^6.0 || ^7.0 | — | — |
nikic/php-parser Version ^5.0 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
symfony/deprecation-contracts Version ^3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.