Library that provides collection, processing, and rendering functionality for PHP code coverage information.
42%
Total Score
0
50
72
83
The package has 100 releases but none in the last 12 months, and its latest release was published in January 2019. The long period without a release is a substantial abandonment and compatibility concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since January 2019.
The package declares 10 runtime dependencies, including PHP extensions and related PHPUnit components. This is a meaningful dependency surface to maintain, but no unusually excessive profile is shown.
The repository name matches the package, but its README does not mention the package name. That weakens package-to-repository transparency, although the matching repository name partly offsets the concern.
The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of an active user or contributor community. Popularity is not decisive alone, but it does not offset the inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sebastian/version Version ^2.0.1 | — | — |
theseer/tokenizer Version ^1.1 | — | — |
sebastian/environment Version ^3.1 || ^4.0 | — | — |
phpunit/php-token-stream Version ^3.0 | — | — |
phpunit/php-file-iterator Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.