The package includes documentation, tests, a changelog, and no install-time scripts. Its repository has had no commits or active maintainers for about five years, while the declared MIT license conflicts with the BSD-4-Clause license file. This makes long-term support and licensing clarity concerns for new projects.
48%
Total Score
50
100
63
83
Although the package has 55 releases, it has had no releases in the last five years, indicating that maintenance has stopped rather than merely slowed.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
The artifact and repository contain a BSD-4-Clause license file, but the manifest declares MIT; the mismatch creates licensing uncertainty despite the presence of a license.
There were no new or closed issues or pull requests in the last month, offering no evidence of current community or maintainer activity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no additional adoption or continuity signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pimple/pimple Version * | — | — |
symfony/finder Version ~2.8|~3.0|~3.2 | — | — |
corneltek/codegen Version dev-master | — | — |
universal/universal Version 2.0.x-dev | — | — |
symfony/class-loader Version ~2.8|~3.0|~3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.