The package is MIT-licensed, includes tests, and installs without lifecycle scripts. The linked project has no security policy or security scanning, leaving transparency and oversight weaker.
32%
Total Score
50
81
75
The package has 87 historical releases, but none in the last 12 months; its latest release was published on February 15, 2016. That long pause is strong evidence of abandonment despite the earlier release cadence.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with its last push occurring in February 2016. This indicates no observable ongoing maintenance.
Composer is used for builds, but no security scanning tools are configured. For an old library with no recent activity, that leaves an additional oversight gap.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a transparency weakness, though less severe than the maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/cache Version ^1.0 | — | — |
doctrine/common Version ^2.5 | — | — |
symfony/console Version ^2.7|^3.0 | — | — |
symfony/stopwatch Version ^2.7|^3.0 | — | — |
symfony/http-kernel Version ^2.7|^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.