This is a licensed, stable, non-deprecated package with a long release history, a current release, organization backing, and a linked repository that references the package. However, maintenance activity is currently weak: there were no commits or active maintainers in the last 3 months, issue activity shows 9 open issues with no issues closed in the last month, and the repository has no security scanning or security policy. Its small popularity and absence of tests are additional, moderate transparency concerns, though the package is compact and purpose-specific and has recent release activity. Overall, it is usable but should be adopted with some maintenance and security-process caution.
72%
Total Score
75
50
83
90
The package has four runtime dependencies, including PHP and established coding-standard components. This is a meaningful dependency surface for a configuration tool but not unusually broad based on the provided counts.
A README and changelog are present, but neither the artifact nor repository contains tests. For a compact coding-standard configuration package this is a moderate transparency gap, although the documented usage and small file set partly reduce its significance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the latest release and repository push show some recent activity, the current commit inactivity is a material maintenance concern.
There are 9 open issues and 5 open pull requests, with no new or closed issues in the last month and only 1 merged pull request. This suggests limited recent issue responsiveness.
The repository has only 2 stars, 1 fork, and 8 watchers. Low popularity is supporting caution rather than a decisive negative because popularity is not required for a small, specialized package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slevomat/coding-standard Version ~8.22.1 | — | — |
symplify/easy-coding-standard Version ^12.5.23 | — | — |
kubawerlos/php-cs-fixer-custom-fixers Version >=3.32,<3.37.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.