The package includes repository tests, a matching MIT license, and no install-time scripts. Its source repository is archived and has had no commits or releases for about five years, so the replacement should be preferred.
12%
Total Score
0
50
75
Packagist marks the entire package as abandoned and names symplify/phpunit-upgrader as the replacement. Package-level deprecation is a severe adoption risk even though it does not by itself indicate malicious behavior.
The package has 176 historical releases, but none in the last 12 months and its latest release was on 2021-09-06, about five years ago. The strong historical cadence does not compensate for the prolonged gap.
The repository recorded zero commits and zero active maintainers in the last three months. This confirms the abandonment indicated by the archive and stale release history.
The linked repository is archived, with its last push on 2021-09-06. An archived source project is a severe sign that maintenance and issue response have ended.
The sole workflow was fully analyzed with no audit findings and no untrusted checkout or script-injection sink. Its pull_request_target trigger is ordinary, but its one action reference is unpinned, a minor reproducibility weakness.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nette/utils Version ^3.2 | — | — |
symfony/console Version ^5.3|^6.0 | — | — |
nette/robot-loader Version ^3.4 | — | — |
symfony/http-kernel Version ^5.3|^6.0 | — | — |
symplify/package-builder Version ^9.4.53 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.