The package has a single maintainer and a very small published artifact, with no README for consumers. Its MIT declaration, changelog, and lack of install scripts are reassuring, but the dependency profile is unusually broad for a development helper.
42%
Total Score
50
70
75
Only one release exists, first published over three years ago, with no releases in the last 12 months. That is a substantial maintenance and abandonment concern.
The package declares 13 runtime dependencies, including PHPUnit, Symfony development bundles, and test tooling. This may be appropriate for a Symfony development environment but creates a broad dependency surface.
The six-file artifact contains project configuration and a changelog but no obvious implementation or documentation files. This provides little transparency into what the package delivers.
The artifact includes a changelog, but no README was published for consumers of this development package. The missing usage documentation is a real usability gap, though not an abandonment signal by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version * | — | — |
symfony/dotenv Version * | — | — |
phpunit/phpunit Version ^9.5 | — | — |
symfony/console Version * | — | — |
symfony/stopwatch Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.