The package includes a README, release notes, tests in its repository, and a small dependency surface. Its stable packaging and clear repository identity help, but the license detection is mixed and security-policy coverage is limited.
58%
Total Score
25
100
71
50
The latest release was about five years ago, with no releases in the past 12 months. The package has four releases over roughly one year, showing an earlier stable cadence but no recent maintenance.
The repository recorded zero commits and zero active maintainers in the past three months, reinforcing the evidence of prolonged inactivity.
The package declares MIT and includes a license file, but artifact detection also identifies BSD-3-Clause. That additional detected license creates some ambiguity about which terms cover the release.
There were no new or closed issues or pull requests in the past month, with two issues remaining open. This is consistent with a quiet project and provides little evidence of active support.
Composer is used for the build, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
microsoft/tolerant-php-parser Version 0.0.23 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.