No releases have appeared since September 2023, and the package's MIT declaration conflicts with its detected GPL-2.0 license file. Organization ownership and a clean workflow audit provide limited reassurance, but do not offset the maintenance and licensing concerns.
18%
Total Score
0
20
50
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on the package.
The package has 36 releases since October 2021, but none in the last 12 months; its latest release was September 20, 2023. The earlier roughly 13-day median interval does not compensate for the prolonged release gap.
There were no commits and no active maintainers in the past three months. This supports the abandonment concern rather than showing ongoing maintenance.
The linked repository is archived, which indicates the project is no longer intended for active maintenance, even though it was pushed on June 27, 2025.
The artifact includes a license file, but it is detected as GPL-2.0 while the manifest declares MIT. That unresolved mismatch creates a meaningful adoption and compliance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^9 | — | — |
twig/extensions Version ^1.5 | — | — |
phpspec/prophecy-phpunit Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.