A README, tests, and organization-backed repository provide useful maintenance context. The small dependency set and lack of install-time scripts reduce integration and installation risk.
58%
Total Score
67
100
83
83
Only one registry account has publish access, which is a limited publishing base. The organization-backed repository provides some compensation for that registry-level concentration.
The package has only two releases, with no releases in the last 12 months and the latest release on September 20, 2022. This is a meaningful sign of stale release maintenance.
There were no commits and no active maintainers in the last three months. This conflicts with the repository's recent push timestamp and leaves current maintenance capacity uncertain, so it lowers confidence in ongoing support.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of broad adoption or review.
Composer build tooling is present, but no security scanning tools are configured. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pmvc/pmvc Version * | — | — |
pmvc-plugin/controller Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.