It includes tests, a README, a license, and a small dependency set, which helps integration. The fork's own warning says active maintenance is not guaranteed; unpinned workflow actions and no security policy add smaller concerns.
38%
Total Score
50
100
83
67
This package has only one release, published 647 days ago, with no releases in the last 12 months. That is a substantial maturity and maintenance concern, though the repository is still available and not archived.
The linked repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's stated maintenance warning. This materially increases abandonment risk.
The repository has zero stars, forks, and watchers, providing no community adoption or external maintenance evidence. Popularity is supporting evidence only, so this reinforces rather than determines the low score.
The project uses Composer for builds, but no security scanning tools were detected. This is a modest hygiene gap rather than evidence that the package is unsafe.
The repository has no security policy. For a small, inactive package this reduces transparency about vulnerability reporting and maintenance response.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nikic/php-parser Version ~4.2 | — | — |
swoft-fork/stdlib Version ~2.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.