It has a clear BSD-3-Clause license, tests, and a matching source repository. Install-time scripts and no security policy add modest review work.
58%
Total Score
75
100
83
67
The package runs post-install and post-update commands, which adds installation behavior that consumers should understand. This is a modest transparency and operational concern, not a severe risk by itself.
The latest release was in October 2018, nearly eight years ago, with no releases in the last 12 months. This is the strongest abandonment concern, although the repository was pushed more recently.
There were no commits and no active maintainers in the last three months, indicating little recent development activity. The repository's 2025 push provides some offset but does not establish an ongoing release cadence.
The repository has no stars or forks and only one watcher, indicating limited adoption evidence. Popularity is supporting evidence rather than a health verdict, so this has only a small negative effect.
Composer build tooling is present, but no security-scanning tooling was detected. The build setup supports maintainability while the missing scanning is a minor hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/common Version ^2.5 | — | — |
symfony/console Version ^2.0|^3.0|^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.