The package is clearly licensed and includes tests, but its source has no recent commit activity and the registry has seen no release in roughly 10 years. The repository also does not identify this package in its README, adding uncertainty about ownership.
38%
Total Score
50
75
100
The latest release was published in January 2016, and there have been no releases in the last 12 months. The history of 102 releases shows past activity but does not offset roughly 10 years without a release.
The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the long release gap and indicating little current maintenance capacity.
The linked repository name does not match the package name, and its README does not mention the package. Although the organization backing provides some context, the package-to-repository relationship remains less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.5 | — | — |
symfony/config Version ^2.7|^3.0 | — | — |
doctrine/common Version ^2.5 | — | — |
elcodi/language Version ^2.0 | — | — |
elcodi/core-bundle Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.