reflective/reflection
The MIT license, focused file tree, and Composer-only runtime dependency make it straightforward to inspect and integrate. The repository is not archived and has a usable README, but no tests or security scanning are visible.
42%
Total Score
50
100
78
75
Health Score Breakdown
The package has only three releases, all clustered around May 2025, and none in the last 12 months despite being about 16 months old. This provides limited evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release pause and raising abandonment risk.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but it provides no additional confidence in long-term support.
Composer is used for the build, which fits the package, but no security scanning tools are configured. This is a modest repository hygiene gap rather than evidence of an unsafe release.
No security policy is present in the repository, reducing transparency for reporting and handling vulnerabilities in a reflection library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 jundayw |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.