The package includes a README, tests, and an MIT license, while its repository remains active enough to avoid being archived. Its single release was published nearly ten years ago, with no newer registry releases, so maintenance and compatibility are uncertain.
48%
Total Score
100
50
78
67
There has been only one release, on October 12, 2016, and none in the last 12 months; this is strong evidence of an unmaintained release line.
Five runtime dependencies, including Symfony components and yandex/geo, create compatibility obligations for an old package, though the dependency count is not unusually large.
The repository has zero stars and forks and one watcher, indicating little visible adoption or external validation; popularity is supporting evidence, not decisive on its own.
Composer is used for the build, but no security-scanning tool is reported, leaving repository security hygiene less transparent.
No repository security policy is present, which is a transparency gap for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
yandex/geo Version ^1.1.2 | — | — |
symfony/config Version ^2.3.9 || ^3.0 | — | — |
symfony/http-kernel Version ^2.3 || ^3.0 | — | — |
symfony/dependency-injection Version ^2.3.3 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.