Clear licensing, a tested source repository, and a clean workflow audit support dependable adoption. The focused dependency set and lack of install-time scripts further reduce operational exposure.
84%
Total Score
63
100
100
100
One contributor made all four recent commits, creating a thin recent contributor base; organization backing provides some handoff capacity but does not remove the concentration risk.
The repository recorded 4 commits in the last 3 months, but all were made by one active maintainer, indicating maintenance exists yet is relatively concentrated.
There were no new issues or closed issues in the last month, although one pull request was merged; this suggests somewhat quiet issue maintenance but not abandonment by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpstan/phpstan Version ^2.2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.