It has a matching license, tests, and a small dependency set. The repository is not archived and the package is not deprecated, but its maintenance evidence is stale.
38%
Total Score
0
100
79
75
The package has 23 releases, but its latest release was in June 2016 and it had no releases in the following 12 months. This is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers over the last three months, matching the long release silence and leaving no current maintenance evidence.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide little visible community support to offset the stale maintenance record.
The repository has no security policy. This is a transparency and response-process gap, although it is secondary to the much stronger abandonment evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jms/metadata Version ~1.1 | — | — |
symfony/form Version * | — | — |
doctrine/annotations Version ~1.0 | — | — |
symfony/http-foundation Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.