The package includes tests, a usable README, and release notes for this version. Its MIT declaration conflicts with GPL-2.0 text found in bundled files; confirm which components you may redistribute.
38%
Total Score
33
50
72
88
The package has had no releases in nearly seven years, despite 16 releases overall. This is strong evidence of abandonment risk for a dependency.
There were zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern.
The package declares six runtime dependencies, including PHPUnit as a runtime dependency. The dependency set is not unusually large, but the classification may increase consumer footprint.
The manifest declares MIT and the artifact contains license files, but detected GPL-2.0 text does not match the declaration. That creates a material licensing clarification risk.
The repository is owned by an individual account rather than an organization, so the thin observed maintenance activity is not offset by visible organizational backing.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^8.3 | — | — |
symfony/console Version ^4.3 | — | — |
symfony/process Version ^4.3 | — | — |
symfony/filesystem Version ^4.3 | — | — |
illuminate/container Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.