Risky to adopt: the package has had no release in over two years and its repository shows no recent commits. The linked repository also does not match the package name or mention it in its README, which raises ownership and maintenance concerns despite solid tests, licensing, and basic workflow hygiene.
48%
Total Score
33
100
67
88
There have been no releases in the last 12 months, and the latest release was over two years ago. This is a substantial maintenance concern for a library dependency, even though the package had eight releases early in its history.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. This materially increases the risk that fixes and updates will not arrive.
The repository name does not match the package name and its README does not mention the package. That makes it unclear whether the linked source repository actually backs this release, a significant supply-chain transparency concern.
Only one registry account has publish access, limiting the visible publishing base. Because this repository is owned by an individual rather than an organization, the narrow maintainer base adds some continuity risk.
There is one open issue and no issue or pull request activity in the last month. The small volume is not inherently problematic, but combined with zero recent commits it provides no evidence of an active maintenance loop.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
darling/roady-routes Version ^1.0 | — | — |
symfony/polyfill-php83 Version ^1.28 | — | — |
darling/php-darling-dev-tools Version ^1.0 | — | — |
darling/php-file-system-paths Version ^1.0 | — | — |
darling/php-unit-test-utilities Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.