Its MIT license and focused dependency set help, but one maintainer and no security tooling leave little support if problems arise. The small repository also provides limited evidence of mature project practices.
42%
Total Score
33
100
71
75
The package has had four releases, but none in about 3 years and 11 months; the latest release was on November 3, 2022. This is strong evidence of abandonment risk.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap. No provided signal shows compensating maintenance activity.
Only one registry publishing account is listed, giving the release a thin apparent publishing base. The repository is user-owned, so there is no organization backing shown to offset that concern.
There are no open issues or pull requests and no recent issue or pull-request activity. While this avoids an unresolved backlog, it also provides no evidence of active community maintenance.
The repository has zero stars and forks and only two watchers. Low popularity is supporting evidence rather than a verdict, but it offers no community signal to offset inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/symfony Version 2.8.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.