Tests, documentation, and an MIT declaration provide useful adoption support, and the organization-owned repository is still available. Unpinned workflow actions and no security policy weaken transparency; pin this release only if its beta status fits your deployment risk.
57%
Total Score
75
79
75
The package has had no releases in the last 12 months, despite 48 releases overall, indicating a prolonged pause after earlier activity. The repository was last pushed at the same time as the latest release, so the slowdown is not only registry-specific.
There were zero commits and zero active maintainers in the last three months, consistent with the absence of releases for over a year. This is a concrete abandonment concern, although the repository is not archived.
Composer build tooling is present, but no security-scanning tools were detected. For a server package with substantial runtime dependencies, that leaves a meaningful supply-chain hygiene gap.
The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities. This lowers transparency for a server package, even though it does not by itself show an active security issue.
Recent releases are 85% prereleases, and the assessed version is explicitly a beta, which increases compatibility and support uncertainty. The package is not deprecated, but its release profile does not show stable-major maturity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
dshafik/bag Version ^1.0 | — | — |
nesbot/carbon Version ^2.72 | — | — |
monolog/monolog Version ^3.7 | — | — |
openswoole/core Version ^22.1 | — | — |
symfony/console Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.