The package has a focused file tree and no install-time scripts, but consumer documentation is thin. Its early version and single-maintainer profile leave support capacity uncertain for a package with no recent releases.
42%
Total Score
50
60
100
The latest release was more than eight years ago, with no releases in the last 12 months. Nine historical releases show some prior activity, but the prolonged halt is a substantial abandonment concern.
One registry maintainer account is listed, leaving a thin publishing and support base. This is not proof of abandonment, but it increases continuity risk alongside the long release gap.
The package has no README, which is a meaningful gap for a library consumers must integrate. The absence of tests and a changelog in the published artifact is normal packaging practice and does not add concern.
Version 0.1.8 is not marked as a prerelease, but the package remains below 1.0, which provides less maturity evidence than a stable-major release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
symfony/serializer Version ^4.1 | — | — |
symfony/property-info Version ^4.1 | — | — |
symfony/property-access Version ^4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.