Simple Build System / Task Runner
12%
Total Score
critical
Unfit to use: the package is deprecated and has had no releases or commits for years.
Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption risk beyond a warning about one release.
The package has 80 releases since March 2014, but none in the last 12 months; version 9.1.2 was released in April 2016, roughly 10 years ago. The long release gap indicates abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's last release being roughly 10 years ago.
The repository is not formally archived, which preserves some access and ownership continuity, but it was last pushed in June 2016 and shows no current activity.
The linked repository has no security policy. This is a transparency gap, though the stronger evidence about abandonment comes from the package's deprecation and inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ~2.7 | — | — |
symfony/config Version ~2.7 | — | — |
yosymfony/toml Version ~0.2@dev | — | — |
symfony/console Version ~2.7 | — | — |
symfony/process Version ~2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.