The package includes a README, tests, an MIT declaration, and a repository that still matches its name. Its old release history, absent recent commits, and lack of security policy point to a largely abandoned project; the runtime dependency list also includes testing tools.
38%
Total Score
0
50
72
50
The latest release was about 10 years ago, with only two releases and none in the last 12 months. This is strong evidence of abandonment for a dependency that may need ongoing compatibility fixes.
The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the long release gap rather than showing ongoing maintenance between releases.
Six runtime dependencies are declared, including phpunit and phpspec with no separate development dependencies. Treating test frameworks as runtime dependencies adds unnecessary consumer burden and suggests weak dependency hygiene.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no community signal to offset the maintenance concerns.
The project uses Composer, providing basic build and dependency tooling, but no security scanning tools were detected. This is a minor hygiene weakness alongside the broader maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpspec/phpspec Version ^2.2 | — | — |
phpunit/phpunit Version ^4.7 | — | — |
cleentfaar/slack Version 0.16.1 | — | — |
guzzlehttp/guzzle Version 4.2.3 | — | — |
symfony/framework-bundle Version >=2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.