PHPUnit coverage tools
68%
Total Score
50
100
94
75
One registry maintainer is consistent with the repository being owned by an individual; this is a limited publishing bus factor but not by itself evidence of abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful recent-maintenance gap despite the latest release and push date.
Composer and Make are used for project builds, but no security scanning tools are reported, leaving a modest supply-chain hygiene gap.
No repository security policy is present, reducing transparency about vulnerability reporting and response expectations.
The single workflow was fully analyzed with no high-confidence audit findings or untrusted checkouts, but all three action references are unpinned, weakening reproducibility and update integrity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^10.3||^11.0||^12.0||^13.0 | — | — |
symfony/console Version ^5.4||^6.2||^7.0||^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.