A set of PHP rules and sniffs
72%
Total Score
75
50
89
90
The package declares 7 runtime dependencies, including established PHP code-quality and Magento coding-standard tools. This is a relatively broad dependency surface for a coding-standard package and increases transitive maintenance burden, but it is consistent with the package's purpose rather than an unexplained dependency pattern.
The repository has 0 commits and 0 active maintainers in the last 3 months, despite the registry reporting a release within the collection period. This mismatch is a meaningful maintenance concern because recent publication is not backed by observed recent source activity.
There are no new or closed issues in the last month, no open issues, and one open pull request. This shows little current collaboration activity, although the absence of an issue backlog is not itself negative.
The repository has 0 stars and 5 forks/watchers, indicating limited visible adoption. Popularity is only supporting evidence, so this lowers confidence in community depth but is not by itself a serious health defect.
Composer is used as a build tool, but no security-scanning tools are detected. The build setup is appropriate, while the missing security automation is a transparency and assurance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpmd/phpmd Version ^2.12.0 | — | — |
phpro/grumphp Version ^2.10.0 | — | — |
phpstan/phpstan Version ^1.9 | — | — |
friendsofphp/php-cs-fixer Version ^3.8.0 | — | — |
squizlabs/php_codesniffer Version 3.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.