Usable with caveats: it is actively published and maintained under an organization, but the project is only 57 days old, has no tests or changelog, and all recent commits come from one contributor.
68%
Total Score
83
75
88
A README is present, but neither the package nor repository includes tests or a changelog. For a unit-testing kit, the absence of repository tests is a meaningful maturity and maintenance gap.
The package is young at 57 days, with four releases and a median interval of about 17 days. This shows active early development but not yet a long maintenance record.
One contributor made all 15 commits in the last 3 months. Organization backing provides some handoff capacity, but the observed maintenance still has a thin individual contributor base.
Composer build tooling is present, but no security scanning tools are reported. The missing scanning is a transparency gap, though it is not by itself evidence of unsafe code.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented for a package intended to support software testing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sukarix/sukarix Version ^v0.5.0 | — | — |
phpunit/php-code-coverage Version ^14.3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.