The package includes tests, a useful README, and a stable release, while its repository remains active in ownership and is not archived. Its single-maintainer project has no recent commits or security policy, leaving maintenance and support uncertain.
38%
Total Score
50
67
75
Packagist marks the entire package as abandoned, with no replacement supplied; this is a substantial warning for a new dependency even though the release itself was not individually withdrawn.
The package has six releases since July 2020, but none in the last 12 months and the latest registry release was in March 2022, indicating several years without a published update.
Only one registry publishing maintainer is listed, which leaves limited visible publishing capacity for a small user-owned project.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance despite the repository not being archived.
The linked repository has no security policy, reducing transparency about how dependency or vulnerability reports are handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/validator Version ^5.0|^6.0 | — | — |
symfony/translation Version ^5.0|^6.0 | — | — |
ronanguilloux/isocodes Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.