The package is licensed and not deprecated, with a small dependency surface and no install scripts. Organization backing does not offset the lack of recent maintenance or security documentation.
38%
Total Score
0
67
75
The package has had no releases in more than nine years; all nine releases occurred on 28 August 2017, indicating prolonged abandonment risk.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the unchanged release history and leaving no evidence of current maintenance.
The package includes a README, but it is only 34 characters long and provides almost no guidance for consumers. The absence of tests and a changelog is normal packaging practice and is not counted against it.
The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent even though the repository owner matches the registry namespace.
The repository has no security policy, leaving maintainers without a documented channel or process for handling vulnerability reports.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/symfony Version >=2.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.