The package has a clear MIT license, extensive tests, release notes, and no install-time scripts. Its source repository lacks a clear package-name or README mention, while its workflows use six unpinned actions.
54%
Total Score
50
72
67
The package has 40 releases since January 2020, but none in the last three years, showing that maintenance has stopped rather than merely slowed.
The repository recorded zero commits and zero active maintainers during the last three months, which is strong evidence of current abandonment risk.
There are eight open issues and one open pull request, but no issues or pull requests were opened or closed in the last month, consistent with an inactive project.
The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this repository publishes this package.
The repository has 25 stars, 15 forks, and 6 watchers. This is limited supporting evidence and does not offset the lack of recent maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1|^2.0|^3.0 | — | — |
symfony/yaml Version ^4.4|^5.4|^6.2 | — | — |
symfony/config Version ^4.4|^5.4|^6.2 | — | — |
psr/http-client Version ^1.0 | — | — |
symfony/console Version ^4.4|^5.4|^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.