This release is usable but warrants caution as a dependency. It has a stable major version, a consistent release history over roughly 2.6 years, an active non-archived organization-backed repository, clear licensing, tests, changelog, build tooling, and no deprecated status or dangerous workflow patterns. However, the repository recorded no commits and no active maintainers in the last 3 months, while the project has low popularity, lacks security scanning and a security policy, and its CI workflow does not declare top-level token permissions. Install-time lifecycle scripts also add operational complexity. Overall, the package shows solid project structure and provenance but has meaningful maintenance and security-hygiene gaps.
68%
Total Score
63
100
89
70
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/php-timer Version ^9.0 | — | — |
sebastian/version Version ^7.0 | — | — |
sebastian/cli-parser Version ^5.0 | — | — |
phpunit/php-file-iterator Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.