The package includes tests, a repository README, and a matching BSD-3-Clause license, but dependency maintenance is a serious concern. Its stable release history and clear source do not offset the absence of repository commits since May 2017.
38%
Total Score
33
100
78
88
The latest release was in September 2016, with no releases in the last 12 months, indicating roughly nine years of release inactivity. Six historical releases show the project was once maintained but do not offset the prolonged gap.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long period since its last push in 2017 and raising substantial abandonment risk.
The repository is owned by an individual user rather than an organization, so the single registry maintainer is consistent with the project backing. This provides limited redundancy if the maintainer is unavailable.
There are no open issues or pull requests and no recent issue or pull-request activity. While this avoids an unresolved backlog, it also offers no evidence of an active user or maintainer community.
The repository has two stars and no forks, providing little evidence of broad community adoption or backup maintenance. Popularity is supporting evidence, so this reinforces but does not determine the abandonment concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/event Version ^2.1 | — | — |
psr/http-message Version ^1.0 | — | — |
symfony/polyfill-php56 Version ^1.0 | — | — |
symfony/polyfill-php70 Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.