The package is a prerelease with no registry releases in over eight years and no commits in the last three months. It still includes tests, documentation, and a matching MIT license, but those strengths do not offset the package-wide abandonment and archived source repository.
10%
Total Score
25
50
83
Packagist marks the entire package as abandoned, with no replacement provided. Package-wide deprecation is a severe adoption risk because future maintenance and compatibility fixes should not be expected.
The package has 26 releases but none in the last eight years, despite previously releasing about every three weeks. This long release gap indicates sustained abandonment rather than a short slowdown.
The repository recorded zero commits and zero active maintainers in the last three months. This confirms there is no current development activity to compensate for the stale release history.
The linked repository is archived, and its last push was over six years ago. An archived source project is a strong indication that the release is no longer maintained.
The source repository is owned by an organization, which provides some ownership context. However, organization backing does not offset the repository's archived state and absent recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ~2.8|~3.0 | — | — |
florianv/swap Version ^3.2 | — | — |
moneyphp/money Version ^3.0 | — | — |
symfony/console Version ~2.8|~3.0 | — | — |
php-http/message Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.