The package includes tests, release notes, a matching repository, and a clear MIT license. Its small project footprint and lack of a security policy add maintenance and transparency concerns.
35%
Total Score
50
67
50
The package is reported to borrow the identity of the much more established ondrejmirtes/better-reflection, with borrows_lookalike_identity true. Although artifact overlap is low, this is strong evidence that consumers may have intended to install the lookalike package.
The latest release was on February 3, 2019, with no releases in the last 12 months. Eight releases over roughly 11 years show a long-maintained period followed by prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history's prolonged inactivity.
No security policy is present in the linked repository, leaving vulnerability reporting and response expectations undocumented for a package that has seen no recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.