Highly opinionated PHPUnit good practices enforcer.
15%
Total Score
0
40
50
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning that new dependencies should not be placed on it.
The package has 17 releases since 2017, but none in the 12 months before collection; its latest release was in August 2022, over four years earlier. This indicates substantial abandonment risk.
The repository recorded no commits and no active maintainers in the three months before collection. That confirms the lack of current maintenance rather than merely a slow release cadence.
The linked repository is archived, so it is no longer maintained through its normal development workflow. Its last push was in October 2023, which does not compensate for the archived status.
Both workflows were analyzed without dangerous triggers or audit findings, but all six action references are unpinned. That is a modest reproducibility and supply-chain hygiene concern, secondary to the package's abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^4.8.36 || ^5.7.27 || ^6.5.14 || ^7.5.20 || ~8.5 || ~9.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.