The package includes tests, a matching license, and a clear organization-backed repository. Its release and commit activity stopped in January 2022, so maintenance support is uncertain; pinning 1.3.0 is prudent.
52%
Total Score
75
88
100
The package has 43 releases and a prior median interval of about 10 days, but it has had no releases in roughly four years since January 2022. That long pause materially raises maintenance and compatibility risk.
There were zero commits and zero active maintainers in the last three months, consistent with activity having stopped around January 2022. This is the strongest abandonment concern, though the repository is not archived.
Composer is used for builds, providing expected ecosystem tooling. No security scanning tool was detected, which is a modest hygiene gap but does not outweigh the evidence of licensing, tests, and organization backing.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.8 | — | — |
doctrine/dbal Version ^2.13 | — | — |
ergonode/core Version ^1.3.0 | — | — |
symfony/validator Version ^4.4.11|^5.3 | — | — |
nelmio/cors-bundle Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.