The small repository footprint and absent security policy provide little additional confidence. The README and organization backing help, but do not offset the long maintenance gap.
32%
Total Score
75
50
75
The package declares no license, contains no license file, and the repository has no license file. That creates a material legal and transparency risk for adoption.
The latest release was published about 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a package intended as an ongoing dependency.
There were no new or closed issues or pull requests in the last month, and the repository has only one open pull request. This provides no evidence of current maintenance activity.
The repository has 0 stars, 2 forks, and 1 watcher, offering little supporting evidence of active community use or review. Popularity is only supporting evidence, so this remains a caution rather than a decisive risk.
The repository is not marked archived, which is mildly reassuring, but it was last pushed about 11 years ago. The observed inactivity outweighs the unarchived status.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version 2.6.* | — | — |
doctrine/dbal Version 2.5.* | — | — |
symfony/config Version 2.6.* | — | — |
symfony/console Version 2.6.* | — | — |
zendframework/zend-code Version 2.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.