Risky to adopt without extra review. The package is recently released and backed by the matching moneyphp organization, but it borrows the identity of the much larger moneyphp/money package and has no recent commits, security policy, or meaningful repository activity.
48%
Total Score
67
100
75
75
The package explicitly borrows the identity of moneyphp/money, which has about 4.1 million monthly downloads and 42 stable releases, while this package has only 396 monthly downloads and eight stable releases. The low artifact overlap and matching repository suggest a related subpackage, but the naming still creates a significant risk that consumers select the wrong package.
The repository recorded zero commits and zero active maintainers during the last three months. Although the package had a recent release, the lack of current development activity raises maintenance risk.
There is one open issue and one open pull request, with no issues or pull requests opened or closed during the last month. This indicates little current community or maintainer activity.
The repository has zero stars, one fork, and two watchers. Popularity is not required for a healthy small package, but these very low figures provide little supporting evidence of review or community adoption.
Composer build tooling is present, but no security scanning tools were detected. The build setup is appropriate for the package, while the missing security automation is a minor hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.