The MIT license, readable documentation, and small dependency set make its intended use clear. The absence of install scripts limits installation risk, but these positives do not offset the severe maintenance and ownership-transparency concerns.
30%
Total Score
0
100
60
100
The package has had no release in nearly 12 years: its latest release was published in November 2014, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long-stalled release history and leaving no evidence of current maintenance.
The linked repository name does not match the package name, and its README does not mention the package. That weakens confidence that the repository is the actual source for this release.
The release is not marked as a prerelease, but it remains on an early 0.x major version, so compatibility and maturity are less established than for a stable-major package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ~2.3 | — | — |
doctrine/doctrine-fixtures-bundle Version ~2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.