This release has strong evidence of active development and reasonable project maturity: it has 60 releases over more than six years, 16 releases in the last 12 months, a current non-prerelease version, substantial tests and documentation, a non-archived organization-owned repository, and 77 commits in the last three months. However, Packagist marks the package as abandoned, repository activity is highly concentrated in one contributor despite a second active contributor, and the linked repository does not match the package name or mention it in its README. The absence of a security policy and explicit workflow token permissions adds hygiene risk. This is usable with verification of the abandonment status and repository identity, but it is not a low-risk dependency choice.
55%
Total Score
90
100
78
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rector/rector Version ^2 | — | — |
webflo/drupal-finder Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.