The release includes tests, release notes, a matching repository, and a clear MIT license. Workflow references are unpinned and the repository has no security policy, adding maintenance and build-hygiene concerns.
70%
Total Score
63
50
89
75
The package has 11 runtime dependencies, including PHPUnit and several project components; this is a meaningful dependency surface but not by itself evidence of poor health.
Only one registry account has publish access. The matching user-owned repository provides some continuity, but the single publisher leaves limited visible publishing redundancy.
There were no commits and no active maintainers in the last three months. This is concerning for maintenance capacity, though the recent 6.1 release provides some compensating evidence.
There are four open issues and no recent issue or pull-request activity, giving limited evidence of ongoing community maintenance.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external maintenance signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6 || ^7 || ^8 | — | — |
phpunit/phpunit Version ^10 || ^11 || ^12 | — | — |
webignition/basil-models Version ^15 | — | — |
smartassert/dom-identifier Version ^0.2.0 | — | — |
webignition/base-basil-test-case Version ^17.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.