The organization-backed repository matches the package and uses a straightforward Composer build with no install scripts. The license mismatch and limited security hygiene add adoption friction.
42%
Total Score
67
67
83
This is the only release, published nearly three years ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain.
The repository has recorded no commits and no active maintainers in the last three months, consistent with the absence of newer releases. Organization backing is present, but no observed activity compensates for the stagnation.
The artifact contains an MIT license file, but the manifest declares the package proprietary. The conflicting declarations create legal ambiguity for consumers.
The package has no README, tests, or changelog, but these omissions are common in published PHP artifacts and are partly explained by the small library layout. The missing README still reduces consumer guidance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no additional community signal for a package with no recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^6.2 | — | — |
quantaforge/support Version ^1.0.0 | — | — |
quantaforge/contracts Version ^1.0.0 | — | — |
quantaforge/macroable Version ^1.0.0 | — | — |
quantaforge/collections Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.