It has a substantial README, exact-version release notes, repository tests, security scanning, and no install scripts or registry deprecation. Workflow dependencies are all unpinned, and the project lacks a security policy.
48%
Total Score
0
100
86
50
The package has had no release in over four years; all five releases occurred within about eight days in March–April 2022, indicating a sharply ended release history.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing more than four years without a new release.
The repository has no published security policy, reducing transparency for reporting and handling security issues in a package that performs runtime code processing.
The workflow audit completed successfully with no dangerous sinks or findings, but all 12 action references are unpinned, leaving build inputs less reproducible.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nikic/php-parser Version ^4.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.