The package is clearly documented and licensed, with repository tests and a changelog. Its repository has no security scanning, and its CI uses an unpinned container image, leaving maintenance and build reproducibility concerns.
38%
Total Score
25
78
67
Although the package has 100 recorded releases, all were published on March 27, 2025, and there have been no releases in the last 12 months. That release pattern provides weak evidence of ongoing maintenance and raises abandonment or provenance concerns.
The repository recorded zero commits and zero active maintainers in the last 3 months, following a last push on March 27, 2025. This is strong evidence that maintenance has stopped.
There were no new or merged pull requests and no issue activity in the last month, consistent with the absence of recent commits. Open issue count is unknown, so this is supporting rather than conclusive evidence.
The repository has zero stars, forks, and watchers. Popularity is not required for a healthy package, but these counters provide no supporting evidence for a package with no recent maintenance.
The project uses Composer for its build, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^6.0|^7.2.2 | — | — |
illuminate/events Version ^10.0|^11.0|^12.0 | — | — |
illuminate/console Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
symfony/serializer Version ^6.0|^7.2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.