The ruleset is compact, licensed, and has release notes for this version. Maintenance evidence is thin, with only two releases and no commits in the last three months; the linked repository also does not clearly match the package name.
57%
Total Score
50
80
50
The package has only two releases over 679 days, with one release in the last 12 months and a median interval of about 416 days. This suggests a small, infrequently changing project rather than active maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, despite the latest push being associated with the assessed release. This leaves limited evidence of ongoing maintenance.
The repository name does not match the package name, and no README mention was available to confirm the relationship. This creates some uncertainty about whether the linked repository is the package's dedicated source.
The repository has no security policy. For a small coding-standard package this is a transparency gap, though it is less significant than for software handling sensitive runtime data.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
slevomat/coding-standard Version ^8.15.0 | — | — |
squizlabs/php_codesniffer Version ^3.10.3 | — | — |
laminas/laminas-coding-standard Version ^3.0 | — | — |
dealerdirect/phpcodesniffer-composer-installer Version ^0.7 || v1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.