The package includes a README, repository tests, an MIT declaration, and no install-time scripts. Its small user base, absent security policy, prerelease status, and long inactivity make continued maintenance uncertain.
42%
Total Score
25
50
64
83
The package has had no releases in the last 12 months, and its latest release was nearly seven years ago despite 12 total releases. This is strong evidence of abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the nearly seven-year gap since the last repository push. This materially increases maintenance and abandonment risk.
Three runtime dependencies are declared, including testing libraries such as PHPUnit and Mockery. Treating development-oriented packages as runtime dependencies adds unnecessary dependency weight and suggests an imprecise package manifest.
The repository is owned by an individual user rather than an organization, and the registry namespace is also individual. Combined with the lack of recent activity, this offers limited backing evidence.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide little supporting evidence of community adoption.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mockery/mockery Version ^1.2 | — | — |
phpunit/phpunit Version ^8.3 | — | — |
guzzlehttp/guzzle Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.