oxkhar/phpeach
Its dependency setup is unusually heavy for a small quality-tools package, and the release has not been updated for nearly 11 years. The MIT declaration and lack of install scripts are positive, but do not offset the maintenance risk.
15%
Total Score
50
38
100
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe direct warning against taking a new dependency on it.
The latest release was published nearly 11 years ago, with no releases in the last 12 months. That long period without a release indicates substantial abandonment risk.
The package declares 11 runtime dependencies, including PHPUnit, PHPSpec, code-quality tools, and documentation tools, with no dev dependencies. Treating this broad toolchain as runtime requirements increases maintenance and installation risk.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for a published artifact, but the missing README modestly reduces guidance for a command-line quality-tools package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Oscar Vítores |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phing/phing Version ~2.8 | — | — |
phpmd/phpmd Version * | — | — |
phploc/phploc Version * | — | — |
theseer/phpdox Version * | — | — |
pdepend/pdepend Version * | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.