The project includes tests, a clear license, and release notes for this version. Recent activity is real but concentrated in one contributor, while security documentation and explicit workflow permissions are missing.
72%
Total Score
50
50
83
75
The package has 12 runtime dependencies, including database, serialization, HTTP, logging, and related project packages; this is a substantial dependency surface that modestly increases maintenance exposure.
Only one account has registry publish access. The linked repository is also owned by an individual rather than an organization, so there is little visible publishing redundancy.
One contributor made all 3 commits in the last 3 months, leaving maintenance fully concentrated in a single person.
The repository received 3 commits in the last 3 months from one active maintainer, showing current maintenance but a modest pace.
There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month; this is neutral rather than evidence of active community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ahamed/jsphp Version ^0.6 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^8.0 | — | — |
league/period Version ^5.0 | — | — |
jms/serializer Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.