The repository is archived and there have been no commits or releases for over eight years. It does have an explicit license, organization backing, and release notes for this version, but those do not offset its withdrawn status and abandonment risk.
15%
Total Score
50
50
100
Packagist marks the entire package as abandoned, with no replacement listed. This is a direct warning against taking a new dependency on it.
The package has had no releases in the last 12 months, and its latest release was over eight years ago. The historical release count does not compensate for the prolonged inactivity.
There were zero commits and zero active maintainers in the last three months, consistent with the archived repository and long release gap.
The linked repository is archived, with its last push over eight years ago. Archived source indicates the project is no longer maintained.
The repository uses Composer and Box for its build, showing some build structure. No security-scanning tooling was detected, but this is secondary to the package's abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^3.2 | — | — |
symfony/console Version ^3.2 | — | — |
symfony/process Version ^3.2 | — | — |
babdev/transifex Version ^2.0 | — | — |
guzzlehttp/guzzle Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.