The source includes tests and a matching README, and the package has no install-time scripts. Its small user base and single registry maintainer leave limited evidence of ongoing support.
42%
Total Score
25
100
67
83
The latest release was in October 2018, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and materially reducing confidence in ongoing maintenance.
No license is declared, and neither the package nor the linked repository contains a license file. This creates a real adoption and redistribution concern.
One individual has registry publishing access. With no organization backing shown, the project has a thin publishing base, although access records do not by themselves establish maintenance activity.
The repository has only 4 stars and 1 fork, so there is little community evidence to compensate for the lack of recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^2.6 || ^3 || ^4 | — | — |
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.