The small, focused artifact has a clear README and no install-time scripts. Its last release and repository activity are from March 2021, and the linked repository does not mention this package, leaving maintenance and provenance concerns.
46%
Total Score
60
75
The latest release was published in March 2021, with no releases in the last 12 months. This long release gap is a meaningful abandonment concern, although the package has a stable 1.0.3 release history.
The repository name does not match the package name and its README does not mention the package. Although this can occur with subpackages, here it leaves the package-to-source relationship insufficiently clear.
The repository is not archived, which is a positive sign, but it was last pushed in March 2021. The inactive repository substantially limits confidence that maintenance is ongoing.
The repository has no security policy. This is a minor transparency gap, but it is less significant than the package's prolonged inactivity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/dependency-injection Version >=2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.