The package includes a usable README and tests, and its repository is still unarchived. Its release and commit history are long dormant, while the missing license and single-person ownership add adoption risk.
38%
Total Score
25
67
The latest release was over 13 years ago, with no releases in the last 12 months. Four releases arrived early in the project's life, but that does not offset the prolonged inactivity.
The repository recorded no commits and no active maintainers in the last 3 months, and its last push was over 11 years ago. This is strong evidence that maintenance has stopped.
No declared license or license file was found in the package or repository. That creates a real legal and adoption concern for downstream users.
The registry lists one maintainer, and project backing identifies a personal account rather than an organization. This leaves limited visible maintenance capacity, especially alongside the dormant activity.
The repository has only 2 stars and 1 fork, providing little evidence of a broad community that could help sustain or review the package. Popularity is supporting evidence, so this reinforces rather than determines the score.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kriswallsmith/assetic Version 1.1.*@dev | — | — |
symfony/framework-bundle Version 2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.