Its MIT license, small dependency set, and changelog make the contents straightforward to inspect. The package was abandoned about 9 years ago and is explicitly deprecated in favor of symfony/console, so it should not be adopted for new work.
12%
Total Score
0
100
57
50
Packagist marks the entire package as abandoned and names symfony/console as its replacement. This is a direct warning against taking a new dependency on this package.
The latest release was published about 9 years ago, with no releases in the last 12 months. That long release gap indicates abandonment risk despite the package's earlier release history.
The repository had no commits and no active maintainers in the last 3 months, and its last push was about 9 years ago. There is no observed maintenance activity to offset the stale release history.
The artifact includes a changelog, but it has no README and no tests; the matching repository also reports no tests. The missing consumer documentation is a transparency gap for a command-line library, although the changelog provides some project history.
Composer build tooling is present, but no security-scanning tool was detected. This adds a modest hygiene concern without outweighing the package's maintenance status.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^2.5 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.