xaerodegreaz/phpspock
Risky to adopt: the package has strong basic transparency, tests, and licensing, but appears abandoned. Its last release and repository push were nearly six years ago, with no recent commits and no security policy.
42%
Total Score
0
67
75
Health Score Breakdown
Only two releases are recorded, and none occurred in the last 12 months; the latest release was nearly six years ago. This is strong evidence of stalled maintenance for a library that must keep up with PHP and PHPUnit changes.
The repository had zero commits and zero active maintainers in the last three months, reinforcing the long release gap rather than showing merely slower publishing.
Composer build tooling is present, supporting reproducible package management. No security scanning tools are configured, which adds a modest transparency concern alongside the absence of a security policy.
The repository is not archived, which avoids the strongest abandonment signal, but its last push was nearly six years ago and does not compensate for the lack of current activity.
No repository security policy is present. This is a transparency gap, and there is no provided evidence of a current security-reporting process to offset it.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Aleksandr Rudakov |
| alec |
| Jerome |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mockery/mockery Version ^1.4.2 | — | — |
symfony/event-dispatcher Version ^2.6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.