The package is small and straightforward, with a clear MIT license, README, and no install-time scripts. Its source has had no commits or active maintainers for over six years, and the lone maintainer and one-star repository offer little evidence of ongoing support; pin it only if its old Symfony/API-doc integration still fits.
42%
Total Score
33
100
72
75
The latest release was in March 2019, with no releases in the last 12 months despite the package being nearly eight years old. This is strong evidence of prolonged stagnation.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's inactivity since 2019. This materially raises abandonment risk.
Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this thin maintainer base provides little resilience if that maintainer stops responding.
The source repository is owned by a personal GitHub account rather than an organization, so there is no observed organizational backing to compensate for the single maintainer.
The repository has one star, no forks, and one watcher, indicating minimal visible adoption or community support. Popularity is only supporting evidence, but it offers no meaningful backup for the inactive maintainer.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^4 | — | — |
nelmio/api-doc-bundle Version ^3.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.