The package is well documented, tested, and MIT-licensed, with no install-time scripts. Organization backing and a matching repository help, but the archived workflow action adds maintenance risk.
42%
Total Score
50
100
67
75
Only two releases were published, both in January 2021, with no release in 5 years 8 months. That strongly suggests the package is abandoned or no longer actively maintained.
There were zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating no current development activity.
The linked repository is not marked archived, but its last push was over five years ago. The unarchived status does not compensate for the observed lack of recent maintenance.
Only one registry publishing account is listed, which is a thin publishing base. The organization-owned repository provides some backing, so this is a minor concern rather than evidence of abandonment by itself.
The repository has 6 stars, 0 forks, and 1 watcher, indicating limited adoption and a small external support signal. Popularity is supporting evidence, so this modestly reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.0 | — | — |
psr/simple-cache Version ^1.0 | — | — |
doctrine/collections Version ^1.3 | — | — |
symfony/event-dispatcher Version ^3.1|^4.0|^5.0 | — | — |
symfony/dependency-injection Version ^3.1|^4.0|^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.