The package has clear licensing, tests, release notes, and a recent repository update. Its small maintainer base, sparse release history, and mostly unpinned workflow actions leave meaningful maintenance and build-integrity caveats.
68%
Total Score
50
100
88
75
The repository is owned by an individual account rather than an organization, so the concentrated maintainer activity is not offset by visible organizational backing.
Only five releases have been published since October 2021, with no registry release in the last 12 months; the latest release is about 22 months old. Recent repository activity partly offsets the stale registry cadence, but release maintenance remains limited.
All one commit in the last three months came from a single contributor, leaving maintenance dependent on one person.
Composer is used for builds, but no security-scanning tooling is reported. For this small package that is a transparency and detection gap rather than a severe risk.
The repository has no security policy, making vulnerability reporting expectations less clear for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ~9.6.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.