The small codebase includes tests, a usable README, and a stable 1.0 release. Its lone maintainer and lack of activity since December 2018 leave compatibility fixes and support uncertain.
42%
Total Score
33
100
72
88
The package has had only one release, on November 28, 2018, with no releases in roughly 7 years and 10 months. This is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the roughly 7 years and 9 months since its last push. This materially increases abandonment risk.
The package and repository are owned by the same individual account, with no organization backing shown. Combined with one maintainer and no recent activity, this leaves limited visible maintenance capacity.
There are no open issues or pull requests and no recent issue activity. This is neutral rather than positive because it may reflect inactivity rather than effective maintenance.
The repository has zero stars and forks and one watcher, providing little community evidence or backup capacity. Popularity is supporting evidence, so this is a modest concern rather than a verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/filesystem Version ^4.1 | — | — |
symfony/serializer Version ^4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.