Documentation is present, and installation has no lifecycle scripts, which reduces adoption friction. The MIT declaration conflicts with the detected BSD-3-Clause license, so licensing should be clarified before use.
12%
Total Score
33
44
75
Packagist marks the entire package as abandoned, with no replacement provided. Package-level abandonment is a direct warning against adopting this release.
The latest release was in September 2017, with no releases in the last nine years. This indicates the package is effectively abandoned for a dependency that may need compatibility or security maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and archived status.
The linked repository is archived and was last pushed in October 2017, so the source is no longer maintained through its primary repository.
The artifact contains a license file and the repository also has one, so licensing is present; however, the manifest declares MIT while the detected file is BSD-3-Clause, creating a clarification risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^3.3 | — | — |
symfony/finder Version ^3.3 | — | — |
symfony/console Version ^3.3 | — | — |
symfony/process Version ^3.3 | — | — |
symfony/filesystem Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.