This is a small, mature, stable PHPUnit extension with a clear MIT license, complete README/tests/changelog, a matching source repository, no deprecation, no install-time lifecycle scripts, and a recent release. The main concerns are limited adoption, a single registry maintainer, no recorded commit activity in the last 3 months, and incomplete repository security hygiene; these warrant monitoring but do not outweigh the package's coherent structure, active recent publication, and useful validation tooling.
78%
Total Score
63
100
89
80
Only one account has registry publishing access. This is a resilience concern, although the linked repository is clearly user-owned and the package remains recently published, so it is caution rather than severe risk.
The repository is owned by the user account "spawnia" rather than an organization. This does not imply poor health, but it provides less organizational continuity than organization-backed ownership.
No commits and no active maintainers were recorded in the last 3 months. This suggests limited recent development capacity, partly offset by the recent release and repository push, so it is a maintenance caution.
The repository has 0 stars, 0 forks, and 1 watcher. This indicates very limited external adoption and support signals, though popularity alone is not required for a small stable package.
The repository uses Make and Composer build tooling, but no security-scanning tool was detected. Build support is positive; the missing security automation is a hygiene gap rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^8 || ^9 || ^10 || ^11 | — | — |
thecodingmachine/safe Version ^1.3.3 || ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.