It includes tests, release notes, a clear MIT license, and no install-time scripts. The package is no longer maintained, and its repository is archived, so future fixes and compatibility work should not be expected.
8%
Total Score
50
63
75
The registry marks the entire package as abandoned, and the package README confirms that it is deprecated and no longer maintained.
There were no commits and no active maintainers in the last three months, consistent with the repository being archived and the project being abandoned.
The linked source repository is archived. Although it was pushed in January 2026, an archived repository is a severe sign that future fixes and compatibility updates should not be expected.
The package has 30 releases since November 2022 and a release in January 2026, but only one release in the last 12 months indicates little recent maintenance activity.
Composer build tooling is present, but no security scanning tools were detected; this is a secondary transparency gap beside the stronger abandonment signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.4 | — | — |
symfony/intl Version ^6.0|^7.0|^8.0 | — | — |
symfony/yaml Version ^6.0|^7.0|^8.0 | — | — |
symfony/asset Version ^6.0|^7.0|^8.0 | — | — |
symfony/config Version ^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.