The package is clearly tied to the Phing organization, with a matching repository and a stable release. Its very small footprint and limited recent activity make long-term maintenance less certain.
68%
Total Score
67
100
94
83
The repository recorded zero commits and zero active maintainers in the last three months. Although the release was recent, this lack of observed development activity lowers confidence in continued maintenance.
There were no new or merged pull requests in the last month and no recorded issue activity; the zero open pull requests are not itself negative. Combined with absent recent commits, this provides little evidence of active community maintenance.
The repository has only 1 star and 1 fork, indicating a very small public user and contributor footprint. This is supporting evidence of limited community depth, while the organization backing partly offsets it.
No security policy is present in the repository. This is a transparency and response-process gap, though it is moderated by the reported Sonar scanning and does not alone make the release unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpmd/phpmd Version ^2.14 | — | — |
phploc/phploc Version ^7.0 | — | — |
pdepend/pdepend Version ^2.9 | — | — |
phpstan/phpstan Version ^2.1 | — | — |
sebastian/phpcpd Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.