PHPMD task for Soy
38%
Total Score
unhealthy
Risky: no commits or releases since November 2015 leaves this integration effectively abandoned.
The package has only two releases, both in November 2015, and none in the last 12 months. That long gap is strong evidence of abandonment risk, though the package is narrowly scoped.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of releases since November 2015. No provided activity signal shows ongoing maintenance capacity.
The repository uses Composer, but has no detected security-scanning tooling. For this small package that is a secondary hygiene gap, not the main adoption risk.
Version 0.2.0 is not a stable major release, which adds compatibility uncertainty. The package is not marked as a prerelease, but its age and lack of maintenance outweigh that reassurance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
soy-php/soy Version >=0.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.