Dependency graph visualization for composer.json
64%
Total Score
50
100
89
83
The registry namespace and repository owner match, and the owner is an individual user rather than an organization. This is consistent ownership evidence but indicates a relatively thin backing structure.
The latest release was in March 2020, about 6 years ago, with no releases in the last 12 months. This is a meaningful maintenance concern despite the package's longer release history.
There were no commits and no active maintainers in the last 3 months, which weakens evidence of ongoing maintenance. The repository's August 2025 push shown elsewhere provides only partial compensation.
There were no new or closed issues or pull requests in the last month, with six open issues and two open pull requests. This suggests limited current project activity but is not evidence of abandonment by itself.
Composer build tooling is present, but no security scanning tools are reported. The missing scanning is a hygiene gap rather than a direct dependency health failure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
clue/graph Version ^0.9.1 | — | — |
graphp/graphviz Version ^0.2.2 | — | — |
symfony/console Version ^5.0 || ^4.0 || ^3.0 || ^2.1 | — | — |
jms/composer-deps-analyzer Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.