Documentation and packaging are straightforward, with no install-time scripts. The short release history and single-person activity leave limited evidence of long-term maintenance; pin this version if adopting it.
65%
Total Score
50
83
75
The repository is owned by an individual rather than an organization, so the concentrated contributor activity has no shown organizational handoff to compensate for it.
The package is only 202 days old with two releases and a median interval of about 91 days, so long-term maintenance is not yet established.
All recent commits came from one contributor, leaving maintenance dependent on a single person.
There was one commit in the last three months from one active maintainer; recent activity exists but is sparse.
The repository has no security policy, reducing transparency around vulnerability reporting for a development-tool package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dg/composer-cleaner Version ^2.0 | — | — |
friendsofphp/php-cs-fixer Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.