Its stable 2.0.0 release and small runtime dependency set make the package straightforward to understand. The package is abandoned in favor of plista/updep, so use the replacement instead.
8%
Total Score
100
33
The package is explicitly marked abandoned on Packagist, with plista/updep provided as its replacement. This is a severe adoption risk.
The last release was in October 2016, nearly 10 years ago, with no releases in the past 12 months. This indicates severe abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pyrech/composer-changelogs Version ~1.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.