The source includes tests, a changelog, release notes, and an MIT license, while the repository is not archived. Maintenance signals are thin and workflow references are unpinned, so ongoing dependency risk remains high.
18%
Total Score
50
67
Packagist marks the entire package as abandoned and names behat/mink-browserkit-driver as its replacement. Package-level abandonment is a severe dependency risk despite the recent release.
The package is mature, with releases since June 2012, but only 1 release in the last 12 months and a median interval of about 244 days indicate a slow cadence. The latest release provides some compensating evidence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This suggests limited ongoing maintenance, although the latest release was recent.
The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked repository directly represents this package.
The workflow audit completed cleanly with no injection or high-severity findings, but both analyzed action references are unpinned. This is a supply-chain hygiene gap rather than a severe risk on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
behat/mink Version ^1.7 | — | — |
symfony/browser-kit Version ^4.4|^5.0|^6.0|^7.0|^8.0 | — | — |
symfony/dom-crawler Version ^4.4|^5.0|^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.