The release has a clear README, tests, release notes, and a matching source repository. Those strengths do not offset the package being withdrawn and its repository archived, with no commits in the last three months.
18%
Total Score
50
58
50
Packagist marks the entire package as abandoned, with no replacement specified. Package-wide deprecation is a severe adoption risk even though the release itself is stable.
The repository had zero commits and zero active maintainers in the last three months. This supports the abandonment concern rather than showing ongoing maintenance.
The linked repository is archived, indicating that active maintenance has ended. A recorded push on November 23, 2025 does not compensate for the repository's archived state.
The package has 14 releases over about five years, but none in the last 12 months. The previously regular median interval of about 51 days has stopped, which is a meaningful maintenance concern.
The repository has no security policy. This weakens disclosure transparency, although it is secondary to the package's deprecation and archived repository.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
matomo/ini Version ^3.0 | — | — |
fakerphp/faker Version ^1.20 | — | — |
symfony/console Version ^5.4|^6.4|^7.2 | — | — |
druidfi/mysqldump-php Version ^2.0 | — | — |
symfony/event-dispatcher Version ^5.4|^6.4|^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.