It includes a README, changelog, tests, and a clear MIT license. The repository is not archived and has no install-time scripts, but its single-user backing and absent security policy limit confidence.
55%
Total Score
50
75
83
The package has 103 releases since February 2020, but it has had no releases in more than five years and none in the last 12 months, indicating likely abandonment.
Only one registry maintainer is listed. Because the repository owner is an individual rather than an organization, there is little visible publishing redundancy if that maintainer stops contributing.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.
Composer is used as the build tool, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
2bj/phanybar Version ^1.0 | — | — |
symfony/yaml Version ^2.7|^3.0|^4.0|^5.0 | — | — |
phpunit/phpunit Version >=8.0 | — | — |
hassankhan/config Version ^0.11.2|^1.0|^2.0 | — | — |
codedungeon/php-cli-colors Version ^1.10.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.