The repository is not archived and the package has a long release history, but no commits were recorded in the last three months. Its linked repository does not identify or mention this package, adding uncertainty about ongoing support.
18%
Total Score
50
70
Packagist marks the entire package as abandoned and names endroid/quality as its replacement, which is a severe adoption risk for a new dependency.
The repository recorded zero commits and zero active maintainers in the last three months, despite the package having a recent release; this weakens evidence of continuing maintenance.
The linked repository name does not match endroid/test and its README does not mention the package, so ownership and support for this release are less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/var-dumper Version ^6.4||^7.4||^8.0 | — | — |
carthage-software/mago Version ^1.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.