The package includes tests, a changelog, a clear MIT license, and a small runtime dependency set. Its source repository is archived and has had no commits for more than eight years, while the registry marks the package abandoned.
12%
Total Score
33
100
56
83
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning that the release is no longer maintained for new dependencies.
The latest release was in October 2016, with no releases in the last 12 months and only three releases overall. This long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its archived status. There is no observed recent activity to compensate for the old release.
The linked repository is archived, and its last push was in April 2018. An archived source repository indicates the project is no longer accepting normal maintenance.
The source repository is owned by an organization, which provides some historical project backing. That backing does not compensate for the repository being archived and the package being marked abandoned.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^2.2|^3.0 | — | — |
symfony/event-dispatcher Version ^2.2|^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.