The package is small, clearly licensed, and backed by an organization with repository tests and no install-time scripts. Its release cadence has stopped and recent commit activity is absent, leaving maintenance uncertainty for future changes.
62%
Total Score
75
100
83
100
The package has had no release in nearly two years, with 0 releases in the last 12 months; this materially raises maintenance and abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last three months, so there is no recent evidence of ongoing maintenance.
The latest release is v0.3.10 and the project has not reached a stable major version, which leaves greater potential for API changes, though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sonsofphp/version-contract Version 0.3.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.