The MIT license, readable README, and unarchived source repository provide basic transparency. However, the last registry release was about nine years ago, with no releases or commits in the latest year, making ongoing compatibility and maintenance uncertain.
48%
Total Score
50
75
The package has had no release in the last 12 months, and its latest release was about nine years ago. Nine releases show some initial history, but the long gap strongly indicates stalled maintenance.
The artifact includes a readable 1,425-character README, which helps consumers, but its configuration and usage sections remain TODO. Missing tests and changelog files are normal for a published package and do not lower the score.
The repository recorded zero commits and zero active maintainers in the last three months. A repository push in 2023 shows it is not entirely untouched, but does not demonstrate current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/symfony Version ^2.4 | — | — |
propel/propel-bundle Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.