The project has no security scanning and no recent release activity, so ongoing maintenance and change quality are uncertain. Organization backing, a matching repository, and release notes for this version provide useful transparency.
58%
Total Score
75
86
75
The package has had no release in more than three years, despite eight releases overall, which raises maintenance and abandonment concerns.
There were no commits or active maintainers in the three months measured, although the repository was pushed in March 2026, so activity has slowed rather than vanished entirely.
Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful transparency and maintenance gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less clear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
johnbillion/args Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.