It has a clear README, repository tests, release notes, an MIT license, and security tooling. Pull requests are active, but the very short project history limits confidence in long-term maintenance.
68%
Total Score
75
94
83
The package is less than one day old with only two releases, so its maintenance record and maturity are not yet established.
The indicator reports zero commits and zero active maintainers over the last three months, a maintenance concern; however, the repository's age is less than one day and recent pull-request activity provides some counterweight.
All 8 analyzed action references are unpinned, which weakens build reproducibility. One workflow grants top-level write permissions, but the audit found no untrusted checkout, injection, or high-confidence workflow findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/pint Version ^1.13 | — | — |
rector/rector Version ^2.0 | — | — |
phpstan/phpstan Version ^2.1 | — | — |
nunomaduro/phpinsights Version ^2.12 | — | — |
phpstan/phpstan-phpunit Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.