A pre-release of the proposed PSR-20 Clock-Interface
58%
Total Score
caution
Usable with caveats: releases stopped in 2022 and the project signalled likely deprecation after PSR-20.
The package has had no releases in nearly four years, with zero releases in the last 12 months. This is a substantial maintenance concern, although the release notes indicate the project may have reached an intentional transition point.
There were no commits and no active maintainers in the last three months covered by the signal, consistent with the long release gap. The release notes provide context but do not remove the maintenance risk for new users.
The repository uses Composer build tooling, but no security scanning tools were detected. For this small PHP interface package, the missing scanning is a modest hygiene gap rather than a severe dependency risk.
The repository has no published security policy. That reduces disclosure transparency, though the package is small and the repository is backed by an organization.
Version 0.1.7 remains before a stable 1.0 release, which limits maturity and compatibility guarantees. The release itself is not marked prerelease, partly offsetting that concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.