The MIT declaration conflicts with the GPL-2.0 license file, and the repository has no security scanning or security policy. It remains small and clearly packaged, with repository tests and no install-time scripts.
42%
Total Score
0
71
83
The package has made no release in about nine years, with five releases all dating from March 2017; this is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing maintenance.
The manifest declares MIT, but the detected LICENSE file is GPL-2.0. Although a license is present, the mismatch creates a material compliance and transparency concern.
The repository has one star, zero forks, and two watchers, providing little evidence of a broader user or contributor base to compensate for the inactive maintainer.
The repository has no security policy. This is a transparency gap, though the package is small and the signal does not by itself show an active security problem.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^3.2 | — | — |
best-served-cold/html-builder Version ^2.0 | — | — |
best-served-cold/phalue-objects Version v0.0.11-alpha | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.