Its last release was in 2017, and no commits were recorded in the past three months. The README and MIT license are clear, but they do not offset the lack of active support or the package's identity concern.
10%
Total Score
50
43
75
The package is flagged as borrowing the identity of knplabs/gaufrette, a much more downloaded package, even though artifact overlap is zero. Consumers may have intended the lookalike package instead.
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on it.
The latest release was September 21, 2017, with no releases in the past 12 months. The long period without releases is a strong abandonment concern for a framework integration package.
The repository recorded zero commits and zero active maintainers in the past three months. This confirms that recent maintenance has stopped rather than merely slowing.
The linked repository is archived, and its last push was on September 23, 2022. Archived source indicates the project is no longer maintained.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 | — | — |
twig/twig Version ~1 | — | — |
doctrine/dbal Version ~2.2 | — | — |
symfony/config Version ~2.8||~3.0 | — | — |
doctrine/inflector Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.