Clear licensing, documentation, tests, and a modest dependency set support basic transparency. The package is abandoned and archived, with no commits or releases since July 2018, making ongoing compatibility and maintenance unlikely.
15%
Total Score
63
100
56
88
Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption risk because the registry itself indicates the package is no longer maintained.
The package has only four releases and none in the last 12 months; its latest release dates to July 2018. This strongly indicates prolonged abandonment.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with its archived state and lack of ongoing maintenance.
The linked repository is archived and was last pushed in July 2018, so future fixes and compatibility updates are unlikely.
There is one open issue and no issue or pull-request activity in the last month. The absence of recent activity is consistent with abandonment, though the archived and release signals already establish the main risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/intl Version ^3.4|^4.0 | — | — |
symfony/config Version ^3.4|^4.0 | — | — |
symfony/http-kernel Version ^3.4|^4.0 | — | — |
symfony/dependency-injection Version ^3.4|^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.