Clear licensing, tests, and a repository matching the package support straightforward use. However, the last release and repository push were nearly five years ago, with no recent commits or security scanning, so future compatibility and maintenance are uncertain.
55%
Total Score
50
81
75
The package has 18 releases but none in the last 12 months, and its latest release was nearly five years ago. This is a substantial maintenance concern despite the earlier release history.
The repository shows no commits and no active maintainers in the last three months, consistent with the long gap since the last release. The project is not archived, but current maintenance capacity is unproven.
The repository has 2 stars, 0 forks, and 1 watcher, providing little evidence of external review or community support. Low popularity is supporting caution rather than a verdict by itself.
Composer is used for the build, which is appropriate for this PHP package, but no security scanning tooling is present. That is a modest transparency and maintenance gap.
The repository has no security policy. For a small, inactive package this reduces the available route for reporting vulnerabilities and adds to the maintenance uncertainty.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpstan/phpstan Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.