Allow stubs with glob in your project
42%
Total Score
unhealthy
Risky: no releases or commits since December 2021, with little evidence of ongoing maintenance.
The latest release was published on December 21, 2021, and there have been no releases in roughly four years and nine months, indicating substantial abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and reinforcing the maintenance concern.
One registry account publishes the package; this is not inherently concerning for a user-owned project, but it leaves little visible publishing redundancy when combined with inactive commits.
The artifact has no README, while this is a library consumers must integrate with; the absence of tests and a changelog is normal for a published artifact and is not counted against it.
The repository is owned by an individual rather than an organization, so the single-maintainer publishing model is plausible but offers limited evidence of ongoing institutional backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vimeo/psalm Version ^4.3.1 | — | — |
symfony/finder Version ~4|~5|~6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.