description
68%
Total Score
80
100
78
50
The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. This creates a significant adoption and redistribution constraint despite the explicit declaration.
All 3 recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving maintenance dependent on a single person in practice.
Six issues remain open, with no issues or pull requests closed in the last month. This is a modest sign that issue follow-through may be limited, although the recent release and commits provide some compensation.
The repository has only 1 star and 1 fork, indicating limited adoption evidence. Popularity is supporting evidence rather than a health verdict, so this is not a major deduction.
Composer is used for the build, but no security scanning tool was detected. The missing scanning is a hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^6.4 || ^7.0 | — | — |
atto/codegen-tools Version ^0.1.0 | — | — |
doctrine/instantiator Version ^2.0 | — | — |
roave/better-reflection Version ^6.25 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.