The tiny README, absent tests, and lack of security scanning leave limited support for maintenance and integration. The MIT license, no install scripts, and non-archived repository reduce adoption friction but do not offset the age of this release.
32%
Total Score
50
57
75
This is the package's only release, published about nine years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.
The artifact includes a README, but it is only 38 characters and says it was forked from another project; tests and a changelog are absent, while a GitHub release exists for this version. The limited consumer documentation is a real transparency gap.
There are no open issues or pull requests and no activity in the last month. While a quiet issue tracker is not inherently harmful, it provides no evidence of an active maintenance community.
The repository has one star, no forks, and no watchers, providing little community evidence to offset the package's lack of ongoing release activity.
Composer is used for the build, providing basic project tooling, but no security scanning tool is configured. This is a modest hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ~2.3|~3.0 | — | — |
symfony/process Version ~2.3|~3.0 | — | — |
guzzlehttp/guzzle Version ~4.0|~5.0|~6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.