The package is clearly documented and licensed, with repository tests and release notes. Its stable version and modest dependency set help, but no release or repository activity for about 2 years 8 months raises maintenance risk.
62%
Total Score
50
100
83
The package has five releases since February 2020, but none in the last 12 months and the latest was in January 2024, about 2 years 8 months ago. This materially raises abandonment risk despite the package's established age.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the latest release. No provided activity signal shows recent maintenance to offset this concern.
Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a minor hygiene gap, not evidence that the package is unsafe or unmaintained by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.0 | — | — |
symfony/http-foundation Version ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.