It has one maintainer and almost no community activity, leaving little visible capacity for support. The package is licensed and its repository matches the package, but that does not offset the long inactivity.
43%
Total Score
25
75
100
Only two releases were published, both in February 2023, with no release in roughly three years and six months. This is strong evidence of abandonment for a maintained dependency.
The repository recorded zero commits and zero active maintainers during the measured three-month period, consistent with the package's prolonged release silence.
A single registry maintainer creates a thin ownership base and leaves the project dependent on one person's continued attention.
The repository has one star, no forks, and one watcher, providing little evidence of an active user or contributor community to compensate for the inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.5 | — | — |
symfony/dom-crawler Version ^4.2 | — | — |
symfony/css-selector Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.