The package has tests, a README, a stable MIT-licensed release, and no install-time scripts. Its source has seen no commits for about eight years, with no releases in the last 12 months, while the small user base and missing security policy add maintenance risk.
42%
Total Score
33
100
72
83
The latest release was published about eight years ago, with no releases in the last 12 months. Although the package has four releases and an earlier short release interval, its current inactivity materially raises abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the repository having been inactive for about eight years. This is strong evidence of abandonment risk.
The repository is owned by an individual user rather than an organization. Combined with one registry maintainer and no recent commits, this offers limited visible backing for continued maintenance.
There is one open issue and no recent issue or pull-request activity. This is a modest transparency and responsiveness concern, but it is less significant than the long-term absence of commits.
The repository has only 2 stars, 5 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these low figures provide little evidence of a broad community able to sustain the package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/var-dumper Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.