The package is small and clearly documented for its testing use case. Recent maintenance is quiet, and its CI configuration lacks dependency pinning, which warrants care when adopting it.
68%
Total Score
50
50
89
67
The package has four runtime dependencies, including PHPUnit, Doctrine DBAL, and Symfony UID. This is a meaningful dependency surface for a small testing package but not excessive enough to be a severe concern.
Only one registry account can publish releases, creating a limited publishing capacity. This is partly consistent with the repository being owned by the same individual, but it still leaves little visible redundancy.
The package and repository are owned by the same individual rather than an organization, so there is no demonstrated organizational backing to offset the narrow maintainer base.
The package has 12 releases over 618 days and three releases in the last 12 months, showing an established release history, though the latest release is not recent relative to collection.
No commits or active maintainers were recorded during the last three months, indicating quiet maintenance despite the recent release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^6.0 || ^7.0 || ^8.0 | — | — |
doctrine/dbal Version ^2.0 || ^3.0 || ^4.0 | — | — |
phpunit/phpunit Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.