Unfit to use for a new dependency: the package is marked abandoned and replaced by sugared-rim/php_codesniffer. Its last release and repository push were in March 2018, with no recent commits, so maintenance and support cannot be relied on.
18%
Total Score
33
100
56
90
The registry marks the entire package as abandoned and names sugared-rim/php_codesniffer as its replacement. This directly indicates that developers should migrate away from this package.
The latest release was in March 2018, and there were no releases in the previous 12 months at collection time. An approximately eight-year release gap is strong evidence of abandonment for a dependency.
The repository had zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. This leaves little evidence of ongoing maintenance capacity.
The linked repository is owned by an organization, which provides some backing context. However, the package is registered under a different namespace and the repository does not clearly mention the package, so this does not overcome the abandonment evidence.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with inactivity, though it does not by itself prove abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
squizlabs/php_codesniffer Version ^2.6 || 3.0 !=2.8.0 !=3.0.0 | — | — |
schnittstabil/composer-extra Version ^2.0 | — | — |
schnittstabil/finder-by-config Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.