The package includes a clear README, an explicit license, and no install-time scripts or registry deprecation. Its tiny community and absent security policy provide little assurance, while the source shows little recent maintenance.
42%
Total Score
0
79
75
The latest release is about 10 years old, with three releases total and none in the last 12 months. This is strong evidence of abandonment risk for a dependency.
The repository had zero commits and zero active maintainers in the last 3 months, reinforcing the long release gap and indicating no current maintenance activity.
The repository has only 3 stars, 1 fork, and 1 watcher. Low popularity is not decisive, but it provides little supporting evidence of broad use or community resilience.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe than the maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/symfony Version >=2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.