The release includes notes, repository tests, and a clear MIT license. Maintenance is recent but concentrated in one contributor, while workflows use broad write permissions and unpinned actions.
68%
Total Score
63
50
88
50
The package has four runtime dependencies, including PHPUnit and related test utilities; this is a meaningful dependency surface for a small testing utility.
post-install-cmd and post-update-cmd scripts run during dependency installation or updates, increasing execution surface beyond ordinary library loading.
The repository is owned by an individual rather than an organization, so the single-contributor concentration is a genuine continuity concern rather than an organization-backed handoff pattern.
The package has existed since December 2020 and released version 4.0.0 in July 2026, but only one release arrived in the last 12 months and the median interval is about 385 days.
One contributor made all commits during the last three months, leaving maintenance dependent on a single active person.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^13.1 | — | — |
wyrihaximus/test-utilities Version ^13.3 | — | — |
wyrihaximus/compress-contracts Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.