A clear README, tests, MIT license, and small dependency footprint make the package straightforward to adopt. Its narrow scope and intact source layout partly reduce the impact of limited ongoing support.
42%
Total Score
25
100
79
50
The package has had no release in more than 8 years, despite five releases overall. This is strong evidence that maintenance and compatibility fixes may no longer be available.
There were no commits and no active maintainers in the last 3 months, consistent with the last push in August 2017. This materially increases abandonment risk.
There is one open issue and no issue or pull-request activity in the last month. This is a modest warning about responsiveness, though the package's narrow scope limits its weight.
The repository uses Composer build tooling, but no security scanning tools are present. For this small Composer script that is a minor hygiene gap, not a severe dependency risk.
The repository has no security policy. That reduces transparency for reporting vulnerabilities, but it is less significant for a small, narrowly scoped utility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version 2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.