The README is practical and the dependency set is small. No license or security policy is provided, which makes long-term use and ownership expectations harder to assess.
38%
Total Score
0
100
50
50
The package has had only two releases, both in October 2014, with no release in nearly 12 years. This is strong evidence of abandonment risk for a dependency.
The repository recorded no commits or active maintainers in the last three months, and its last push was in July 2020. The repository is not archived, but current maintenance capacity is effectively unobserved.
No declared license or license file was found in the package or repository. That creates a genuine adoption and redistribution concern.
The repository has no security policy. For a small, inactive package this further reduces transparency about how reported issues would be handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
behat/behat Version ~3.0 | — | — |
symfony/process Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.