Wrapper around PHP's tokenizer extension.
58%
Total Score
25
88
75
There were zero commits and zero active maintainers in the last three months, consistent with the package's multi-year release gap. This is the main ongoing maintenance risk.
The package and repository are backed by a single user account rather than an organization, so the one registry maintainer provides limited visible continuity if that maintainer stops supporting it.
The package has a substantial history of 36 releases since 2012, but its latest release was in November 2020 and there have been no releases in over five years. That strongly raises abandonment and compatibility concerns despite its maturity.
The repository has zero stars, forks, and watchers, offering no supporting evidence of an active community or broad current use. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.
No repository security policy was found, leaving vulnerability-reporting guidance undocumented. This is a transparency gap, but it is less significant than the confirmed build and maintenance signals.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.