The MIT license, clear README, active repository, and organization backing support dependable use. Maintenance is currently quiet, with no commits or active maintainers in the last three months, despite the 1.6.0 release.
70%
Total Score
75
50
94
75
This is a Composer development meta-package with 8 declared runtime dependencies, including PHPUnit and Symfony tooling. The dependency bundle is broad, so adopters inherit several upstream maintenance surfaces, but that is consistent with its stated purpose.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. The 1.6.0 release and recent repository push partly offset this, but the lack of recent development is a maintenance caution.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of abandonment.
The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, which modestly lowers project transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
fakerphp/faker Version ^1.20 | — | — |
phpunit/phpunit Version ^9.6 | ^10 | ^11.4 | ^12 | ^13 | — | — |
symfony/browser-kit Version ^5.4 | ^6 | ^7 | — | — |
doctrine/sql-formatter Version ^1.1 | — | — |
symfony/doctrine-bridge Version ^5.4.7 | ^6 | ^7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.