It has a clear README, MIT licensing, repository tests, and release notes for this version. The workflow audit found no dangerous sinks, but all 12 action references are unpinned, adding maintenance risk.
18%
Total Score
25
50
67
Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption risk because future fixes and compatibility work are not assured.
The package has 33 releases and a historically regular cadence, but its latest release was August 15, 2022, with no releases in the last 12 months. That is more than four years without a registry release at collection time.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the archived state, this indicates no current development capacity.
The linked repository is archived, despite a recorded push on January 6, 2026. An archived source project is not an active maintenance path for a dependency.
There were no new or closed issues or pull requests in the last month, leaving four open issues and one open pull request. This supports the broader evidence of stalled maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/cache Version ^1.11 | — | — |
symfony/config Version ^5.0|^6.0 | — | — |
doctrine/common Version ^2.11|^3.0 | — | — |
monolog/monolog Version ^2.0 | — | — |
symfony/routing Version ^5.0|^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.