The repository includes tests, a clear README, and release notes for this version. Security documentation is absent and workflow actions are not pinned, leaving maintenance and build-reproducibility concerns.
68%
Total Score
50
100
81
75
The package and repository are owned by the same individual account, so the source linkage is coherent, but there is no organizational backing shown to broaden maintenance capacity.
The package has 71 releases over nearly 13 years, but none in the last 12 months; the repository was still pushed on the latest release date, which partly offsets the cadence concern.
There were no new or merged pull requests and no issue activity in the past month. This is a modest maintenance concern, though the recent repository push provides some counterevidence.
The linked repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external maintenance signal.
The project uses Make and Composer, but no security scanning tool was detected. That is a transparency and maintenance gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/polyfill-mbstring Version ^1.18 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.