Psalm plugin for the understudy test double library: matcher-aware setup closures and misuse diagnostics
74%
Total Score
caution
Usable with caveats: all recent work comes from one contributor, creating a continuity risk.
One registry maintainer is consistent with the user-owned repository, but it also indicates limited publishing redundancy if that person becomes unavailable.
The package and repository are both owned by the same individual account, so the source relationship is clear, but there is no organizational backing to offset the concentrated maintainer base.
The project is only 32 days old but has made 19 releases, including recent activity. This shows strong responsiveness, though the short history leaves long-term durability unproven.
One contributor made all 41 commits in the last three months, so maintenance continuity is highly concentrated in a single person.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, not evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vimeo/psalm Version ^6.16 | — | — |
nikic/php-parser Version ^5.0 | — | — |
rasuvaeff/understudy Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.