The README is substantial, the release is licensed, and the package includes a clear file tree with Composer build tooling. The repository has no security policy or scanning, leaving maintenance transparency thin.
43%
Total Score
50
100
72
75
The latest registry release was in August 2016, with no releases in the following nine years and only three releases overall. This is strong evidence of abandonment risk despite the package's long age.
There were no commits or active maintainers in the last three months, consistent with a project that has been inactive for years. This materially raises the risk of unaddressed compatibility and maintenance problems.
The repository has one star and no forks, providing little community evidence to offset the inactive maintenance record.
Composer build tooling is present, but no security scanning tools are configured. The tooling is adequate for packaging but provides little additional assurance.
The linked repository is not archived, although its last push was in April 2018, so the active repository status does not compensate for the older activity gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/symfony Version >=2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.