A class to read and write PHP arrays.
38%
Total Score
50
75
50
Packagist marks the entire package as abandoned and names serendipity_hq/component-array-writer as its replacement. This is a direct reason not to start a new dependency on this package.
The package declares post-install and post-update Composer scripts, giving installation and updates executable lifecycle behavior. No other provided signal shows these scripts are unsafe, so this is a limited supply-chain hygiene concern.
The package has 27 releases since May 2016, but none in the last 12 months; its latest release was on February 28, 2025. That weakens confidence in continued maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, despite its separate recent push timestamp. This provides little evidence of ongoing development capacity.
The linked repository name does not match the package name, and its README does not mention serendipity_hq/php_array_writer. That raises uncertainty about whether the repository is the intended source for this package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
thecodingmachine/safe Version ^2.0|^3.0 | — | — |
symfony/property-access Version ^5.4|^6.4|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.