The package includes a README, tests, and a declared MIT license, and its repository is not archived. Its release and commit history has been inactive since June 2017, leaving substantial maintenance and compatibility risk.
45%
Total Score
25
100
75
83
The latest release was published in June 2017, with no releases in the following 12 months and no recent release activity across the package's roughly nine-year age. This is strong evidence of abandonment risk despite the 11 historical releases.
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the 2017 latest release, this is a strong abandonment concern.
There were no new or closed issues and no pull requests in the measured month, with zero merged pull requests. This indicates no recent maintenance activity, although the null open-issues count is unknown.
The repository uses Composer for builds, which is appropriate for a Packagist PHP bundle. No security scanning tool was detected, leaving a minor hygiene gap, but this is less significant than the inactivity evidence.
The linked repository is not archived, so the project remains technically open to maintenance. However, its last push was in June 2017, which corroborates the inactivity shown by release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alexvasilyev/mthaml Version ^1.9 | — | — |
symfony/twig-bundle Version ~2.3|~3.0 | — | — |
symfony/framework-bundle Version ~2.3|~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.