The repository includes tests, release notes, a clear license, and security scanning. However, development and publishing have been inactive for more than two years, and all 12 workflow actions are unpinned.
64%
Total Score
50
100
94
67
The registry namespace and repository are owned by the same individual, which is consistent ownership but provides a thin backing structure rather than organizational resilience.
The package has four releases since September 2021, but none in the last 12 months and the latest was published more than two years ago. This indicates materially slowed maintenance for a dependency.
There were no commits and no active maintainers in the last three months, consistent with the release gap and raising abandonment risk.
There are no open issues or pull requests, and no recent issue or pull-request activity. This is compatible with a small stable project, but provides no evidence of current maintenance response.
No repository security policy was found. This is a modest transparency gap, though the presence of Psalm provides some compensating security practice.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
codeception/module-db Version ^3.0 | — | — |
codeception/codeception Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.