The repository contains tests and this release documents its change. MIT licensing, a matching source repository, and no install-time scripts make adoption clearer, but the project has no security policy or scanning.
66%
Total Score
50
50
94
50
Ten runtime dependencies create a meaningful maintenance surface for a code-generation library, though the profile is disclosed and not unusually extreme on its own.
Only one registry account has publish access, which leaves limited visible publishing redundancy; this is partly offset by the matching source repository and recent release activity.
The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is no organizational backing signal to offset the thin maintainer base.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance activity has recently slowed.
Composer build tooling is present, but no security scanning tools were detected, reducing automated coverage for a published dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-di/php-di Version ^7.0 | — | — |
webmozart/glob Version ^4.6 | — | — |
symfony/console Version ^6.0 | ^7.0 | — | — |
nette/php-generator Version ^4.1 | — | — |
php-openapi/openapi Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.