Clear documentation, tests, release notes, and matching MIT licensing make the package straightforward to evaluate and adopt. Low repository visibility and the lack of a security policy leave less external assurance around long-term support.
68%
Total Score
38
50
89
67
The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign that maintenance activity has recently stalled.
The package has nine runtime dependencies, including several project-specific libraries; this is a meaningful dependency surface but not excessive for its stated localization functionality.
The package defines a post-autoload-dump install-time script. Such scripts can be normal Composer integration, but they add execution during installation and deserve more scrutiny than a package without lifecycle code.
Only one account has registry publishing access. The linked repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.
The repository owner is a user account rather than an organization, so the project has limited visible institutional backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mck89/peast Version >=v1.17.0 | — | — |
mistralys/html_quickform2 Version >=2.3.5 | — | — |
mistralys/changelog-parser Version >=1.0.2 | — | — |
mistralys/php-sprintf-parser Version ^1.0 | — | — |
mistralys/application-utils-core Version >=2.3.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.