The package includes a clear README, matching MIT license, release notes, repository tests, and no install-time scripts. Its small release history and limited recent activity leave less evidence of long-term maintenance, while organization backing reduces the impact of one-contributor concentration.
72%
Total Score
67
100
86
75
The package is only 171 days old with two releases, separated by about 145 days, so there is limited evidence of an established maintenance pattern.
One contributor made all recent commits, creating a concentrated maintenance path. The organization-owned repository provides some handoff capacity, so this is a caution rather than a severe risk.
Only one commit was recorded in the last three months, showing limited recent development activity even though it is not absent.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, which makes vulnerability reporting and handling less transparent for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpnomad/di Version ^2.0 | — | — |
phpnomad/utils Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.