The package has a clear MIT declaration, useful documentation, and a repository that appears to belong to it. Its limited adoption and missing security policy add modest transparency concerns alongside the maintenance risk.
40%
Total Score
50
100
78
83
The latest release was published in March 2018, with no releases in the last 12 months. About 8 years without a release is strong evidence that maintenance has stopped.
There were no commits and no active maintainers in the last 3 months. Combined with the release history, this supports a strong abandonment concern.
No issues or pull requests were created or closed in the last month, while one issue and one pull request remain open. This is consistent with an inactive project.
The repository has only 3 stars and 4 forks, providing little evidence of a broad support community. Popularity is supporting evidence rather than a decisive health measure.
Composer is used for builds, showing basic project tooling, but no security scanning tools are configured. The missing scanning is a modest hygiene gap rather than a standalone dependency blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
victoire/victoire Version >=2.2.7 | ~3.0 | — | — |
troopers/ajax-bundle Version ~1.2 | — | — |
lexik/form-filter-bundle Version ~5.0 | — | — |
symfony/framework-bundle Version ~2.8|~3.0 | — | — |
beberlei/doctrineextensions Version ~1.0.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.