It has clear documentation, tests, and organizational backing. Unpinned workflow dependencies and no security scanning weaken release hygiene, while the small project has seen no commits for about nine months.
62%
Total Score
75
100
81
83
Four releases were published within about four days, but there has been no release since December 2025 despite the package being about nine months old. This shows an initially active launch followed by a long quiet period.
There were zero commits and zero active maintainers in the last three months. Combined with the last push being about nine months ago, this is a meaningful maintenance and abandonment concern.
The repository has zero stars and watchers and only one fork. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of broad community support.
Composer build tooling is present, but no security-scanning tool is configured. For a small PHPUnit extension this is a release-hygiene gap, not evidence that the package is unsafe.
No repository security policy was found. This limits transparency about vulnerability reporting, though it is a moderate documentation gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.