The package has a usable README, a declared MIT license, and no install scripts. Its minimal repository has no tests or security policy, and the linked repository does not clearly identify the package.
35%
Total Score
0
69
75
The latest release was published in August 2018, with no releases in eight years. The 14-release history shows an initially active package but no ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with no development since August 2018. The non-archived status does not compensate for the absence of recent work.
The repository name does not match the package name and its README does not mention the package, so the source linkage is not clearly established. That weakens provenance and transparency.
The repository has one star, zero forks, and zero watchers, providing little evidence of community adoption or outside maintenance capacity. Popularity is only supporting evidence, but it reinforces the abandonment concern.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap for a package that integrates into web application serialization.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bigz/halapi Version ^0.2 | — | — |
league/fractal Version ^0.17.0 | — | — |
jms/serializer-bundle Version ^2.4 | — | — |
pagerfanta/pagerfanta Version ^1.0 | — | — |
symfony/framework-bundle Version ~2.7 || ~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.