The package is clearly identified and its dependency surface is small, but there is little evidence of ongoing care or release discipline. The repository has no security scanning and almost no community activity to offset that weakness.
18%
Total Score
0
30
The artifact includes a README, but it has no tests or changelog; absent tests and changelogs are normal for published artifacts. More importantly, the README explicitly says the project is not supported, which is a serious adoption warning.
This is the only release, published over seven years ago, with no releases in the last 12 months. That strongly indicates an abandoned project rather than an actively maintained dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long-standing lack of releases. No provided signal shows current maintenance capacity.
No license is declared, and neither the package nor repository contains a license file. This leaves the legal terms for using the dependency unclear.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these values provide no community evidence to compensate for the abandoned release and inactive repository.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.