The package includes tests, a README, an MIT declaration, and no install-time scripts. Its small footprint and absent security tooling provide limited evidence of ongoing operational maturity.
38%
Total Score
33
100
72
75
This is the package's only release, published more than 7 years ago, with no releases in the last 12 months. That strongly suggests the dependency is no longer maintained.
There were no commits or active maintainers in the last 3 months, consistent with a project that has been inactive since May 2019. This is strong abandonment evidence.
Only one registry account has publish access. That is a narrow publishing base, and no organization backing is shown to compensate for the concentration.
The repository is owned by an individual user rather than an organization, and the registry namespace does not provide compensating organizational backing. This leaves limited visible maintenance capacity.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than decisive, but these values provide no adoption or community-maintenance buffer.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pimple/pimple Version ^3.2 | — | — |
symfony/cache Version ^4.2 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
symfony/http-foundation Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.