The README, tests, and matching repository provide useful documentation and traceability. The package has no stated license, which complicates redistribution and long-term use.
38%
Total Score
50
70
The latest release was in March 2017, and there have been no releases in roughly 9 years despite the package being about 10 years old. This strongly raises abandonment risk.
No declared license, recognized license text, or license file was found in the package or repository. This creates a real adoption and redistribution concern.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's roughly 9-year release gap. The inactive project is a substantial maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sebastian/diff Version 1.4.* | — | — |
symfony/console Version ^2.5.4 | — | — |
nikic/php-parser Version 3.0.* | — | — |
padraic/phar-updater Version ^1.0 | — | — |
wyrihaximus/react-child-process-pool Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.