It has a stable MIT release, repository changelog, and working Composer-based project structure. The workflow audit found only a low-confidence cache concern, while the several runtime dependencies add modest upkeep.
64%
Total Score
50
83
100
The package has 44 releases since September 2021, but its latest release was over two years ago and there were no releases in the last 12 months. This materially raises maintenance and abandonment concern.
The repository recorded no commits and no active maintainers in the last three months. The recent repository push timestamp is some evidence of ongoing repository presence, but not of active development.
There are no new or closed issues and no merged pull requests in the last month, although four pull requests remain open. This suggests limited recent project activity without proving abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slevomat/coding-standard Version ^8.0 | — | — |
squizlabs/php_codesniffer Version ^3.6 | — | — |
sirbrillig/phpcs-import-detection Version ^1.3 | — | — |
phpcompatibility/php-compatibility Version ^9.3 | — | — |
sirbrillig/phpcs-variable-analysis Version ^2.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.