It remains an alpha release with five runtime dependencies, including development-oriented tools, which adds integration risk. The repository could not be found, so maintenance and provenance cannot be verified.
8%
Total Score
50
17
Packagist marks the entire package as abandoned, with no replacement package provided. This is a severe adoption risk because future maintenance cannot be expected.
This package has only one release, published in July 2016, with no releases in the last 12 months. That long period without a release is strong evidence of abandonment.
The package declares five runtime dependencies, including PHPUnit, PHP Mess Detector, Phing, and a coverage reporter; this is a substantial dependency surface for development tools and increases integration and maintenance risk.
The latest and only version is the prerelease 1.0-alpha1, with no stable release history to offset the maturity concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phing/phing Version ^2.14 | — | — |
phpmd/phpmd Version ^2.4 | — | — |
phpunit/phpunit Version ^5.4 | — | — |
opsbears/coverage-reporter Version ^0.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.