This is a well-documented, actively developed package with a matching repository, a clear MIT license, changelog, repository tests, substantial recent commit and pull-request activity, security tooling, and an explicit security policy. Adoption carries moderate caution because the package is young at 59 days, remains below 1.0, has a highly concentrated contributor base, and uses post-install and post-update lifecycle scripts; CI permission declarations are also incomplete in several workflows. Overall, the observed maintenance and repository hygiene make it reasonably safe to depend on, but it has not yet demonstrated the maturity or maintainer redundancy of a long-established package.
78%
Total Score
70
100
83
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
voku/stop-words Version ^2.0 | — | — |
helgesverre/toon Version ^3.1 | — | — |
nikic/php-parser Version ^5.0 | — | — |
voku/agent-graph Version ^0.2.0 | — | — |
voku/simple-php-code-parser Version ^0.22 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.