The repository remains available, with a BSD-3-Clause license, a README, and tests in the source tree. Its very small community footprint and absent security policy add transparency concerns, despite organization backing.
55%
Total Score
75
75
75
Only two releases exist, and none were published in the last 12 months; the latest registry release was in June 2020. This is the strongest sign that the dependency may be abandoned.
The repository recorded no commits and no active maintainers in the last three months, with the last push in February 2024. That supports the release-history concern, although the repository is not archived.
The repository has 0 stars, 0 forks, and 1 watcher, indicating little visible adoption or community support. Popularity is only supporting evidence, so this is a modest concern rather than a verdict.
No security policy is present in the repository, reducing the transparency of vulnerability reporting and response. This is a hygiene gap, not evidence of an unsafe package by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/neon Version ^3.0 | — | — |
symfony/yaml Version ^4.4 | — | — |
nikic/php-parser Version ^4.4 | — | — |
doctrine/inflector Version ^1.3 | — | — |
nette/php-generator Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.