The package is clearly licensed and has a substantial source tree, with no install-time scripts or archive flag. Its small audience and missing security policy add caution for a client handling business data.
59%
Total Score
50
75
75
A README and GitHub release are present, but the README contains unfinished “Fill in” sections. The absence of tests and a changelog is normal for a published artifact and is not penalized.
The package has 22 releases since January 2021, but its latest release was in December 2024 and it had no releases in the following 12 months, indicating a prolonged pause.
The repository recorded no commits and no active maintainers in the last 3 months, which supports the release-history concern about stalled maintenance.
The repository has 1 star and 4 forks, providing little evidence of broad adoption. This is supporting context rather than a standalone health failure.
Composer is used for the build, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jms/serializer Version ^1.9|^3.9 | — | — |
marc-mabe/php-enum Version ^4.4 | — | — |
symfony/http-client Version ^4.0|^5.1|^6.0 | — | — |
symfony/http-foundation Version ^4.0|^5.1|^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.