Risky to adopt: this package has had only one release, about nine years ago, with no recent repository activity. It is not deprecated or archived and has a matching, minimal source repository, but the long abandonment gap makes it a liability for new projects.
40%
Total Score
50
50
72
88
The package has only one release, first and latest published about nine years ago, with no releases in the last 12 months. This is strong evidence of abandonment, despite the package not being formally deprecated.
There were zero commits and zero active maintainers in the last three months, consistent with the package's long period without releases. This materially increases abandonment risk.
The package declares two runtime dependencies, including phpunit/phpunit, which is unusual for a small production library and may add unnecessary dependency burden. The profile is small, so this remains a moderate concern rather than a severe one.
There are no open issues or pull requests and no recent issue or pull-request activity. While this is not inherently unhealthy, it provides no evidence of an active maintenance community.
The repository has one star, no forks, and no watchers, providing little evidence of community adoption or external maintenance capacity. Low popularity alone is not disqualifying for a small package, but it offers no compensating support here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.