There is no security scanning or policy, and the repository shows almost no community activity. The MIT license and organization-backed repository add transparency, but do not offset the maintenance risk.
15%
Total Score
75
50
83
Packagist marks the entire package as abandoned, with no replacement provided; this is a direct warning against taking a new dependency on it.
The latest release was published over six years ago, with no releases in the last 12 months, indicating prolonged abandonment rather than an active maintenance cycle.
There were no new or closed issues or pull requests in the last month, and no open work is visible; this supports the broader evidence of inactivity.
The repository has zero stars and forks and only one watcher, providing no meaningful community adoption signal to offset the maintenance concerns.
Composer build tooling is present, but no security-scanning tools were detected, leaving a transparency and maintenance gap for a package with many runtime dependencies.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
fw_micro/db Version ^1 | — | — |
nette/routing Version ^3.0 | — | — |
symfony/debug Version ^4.4 | — | — |
monolog/monolog Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.