simple wrapper for hassankhan/config used in nearly all of my projects
38%
Total Score
unhealthy
Risky to adopt: one release and no maintenance activity since January 2021.
There has been only one release, on January 24, 2021, with no releases in the last 12 months. This is strong evidence of a stagnant package rather than an actively maintained dependency.
The repository had zero commits and zero active maintainers in the last three months. Together with the single historical release, this indicates substantial abandonment risk.
The repository is not archived, but its last push was on January 24, 2021. The non-archived status does not compensate for the lack of recent maintenance evidence.
The wrapper declares four runtime dependencies, including PHP, hassankhan/config, Symfony YAML, and phpdotenv. This is a meaningful dependency surface for such a small package, though not inherently excessive.
The artifact and repository contain only LICENSE, composer.json, and src/Config.php. That is consistent with a very small wrapper, but it provides little visible project depth.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^5.2 | — | — |
vlucas/phpdotenv Version ^5.3 | — | — |
hassankhan/config Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.