It has a clear MIT license, a README, tests, and no install-time scripts. Its narrow scope may limit exposure, but there is no evidence of ongoing maintenance.
43%
Total Score
33
100
78
88
The package has only one release, published about 7 years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained dependency, although the small package scope may reduce the impact of stagnation.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with its last push being in June 2019. No provided signal shows current maintenance capacity.
The repository is owned by an individual rather than an organization, and the registry and repository owners align. This provides direct ownership consistency but no broader project backing.
There has been no issue or pull-request activity in the last month. This supports the broader inactivity concern, though the absence of open issues is not itself harmful.
The repository has 0 stars, forks, and watchers, providing no community adoption or external review evidence. Popularity is supporting evidence only, so this reinforces but does not establish the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nikic/php-parser Version ^4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.