A set of PHP tools for LAMP stack development
64%
Total Score
caution
No registry release in about 17 months and all recent repository work comes from one contributor.
The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
The package has 34 releases since July 2019, but none in the last 12 months; its latest registry release was about 17 months ago, which raises maintenance concern.
One contributor made 100% of the recent commits, leaving maintenance dependent on a single individual and increasing abandonment risk.
Only one commit was recorded in the last 3 months. That is some evidence of ongoing maintenance, but the low volume limits confidence in active development.
Composer is used as the build tool, but no security-scanning tools are present; the missing scanning is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
setasign/fpdf Version ^1.8 | — | — |
aws/aws-sdk-php Version ^3.71 | — | — |
erusev/parsedown Version ^1.7 | — | — |
phpmailer/phpmailer Version ^6.0 | — | — |
defuse/php-encryption Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.