Recent releases, release notes, and active issue handling show ongoing work. The single-contributor activity, missing license, and unpinned workflow actions leave meaningful adoption and maintenance concerns.
68%
Total Score
75
100
94
100
No license declaration or license file was found in the package or repository, leaving the legal terms for using this dependency unclear.
One contributor made 100% of the seven recent commits. Organization backing provides some handoff capacity, but no second active contributor is shown.
Seven commits were made in the last three months, but all came from one active maintainer, limiting demonstrated maintenance capacity.
The single workflow was fully analyzed, uses read-only permissions, and has no detected injection or high-confidence audit findings. However, all 10 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpgt/cli Version ^1.3 | — | — |
phpgt/cron Version ^1.0 | — | — |
phpgt/build Version ^1.0 | — | — |
phpgt/server Version ^1.2 | — | — |
phpgt/database Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.