The package is clearly licensed, documented, and backed by an organization, with no install scripts. Its repository has no commits or security policy yet, so long-term maintenance is unproven.
61%
Total Score
75
100
88
88
The package was first released today and has only two releases, so there is not yet enough history to demonstrate sustained maintenance.
No commits and no active maintainers were observed during the last three months. Because the repository was created or populated today, this is evidence of unproven maintenance rather than confirmed abandonment, but it still warrants caution.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.
The linked repository has no security policy, reducing transparency about vulnerability reporting and handling.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
fakerphp/faker Version ^1.20 | — | — |
phpunit/phpunit Version ^9.6 | ^10 | ^11.4 | ^12 | ^13 | — | — |
symfony/browser-kit Version ^5.4 | ^6 | ^7 | — | — |
doctrine/sql-formatter Version ^1.1 | — | — |
symfony/doctrine-bridge Version ^5.4.7 | ^6 | ^7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.