The package is well documented, licensed, tested, and has no install-time scripts. It has no security policy, so maintenance concerns are harder to resolve.
34%
Total Score
25
75
75
Only two releases exist, with the latest published about 13 years ago and none in the past 12 months. This is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and indicating no current maintenance capacity.
Four issues remain open, while there were no new or closed issues or pull requests in the past month. This suggests unresolved maintenance rather than an actively managed project.
The repository has only 4 stars, 1 fork, and 1 watcher. Popularity is supporting evidence rather than a verdict, but this small audience provides little visible community backing.
The linked repository has no security policy. This does not prove a security problem, but it reduces transparency and makes reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
chh/fileutils Version 1.0.*@dev | — | — |
symfony/process Version ~2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.