There have been no commits or releases since December 2023, and the source repository is archived. The package remains licensed, documented, and tested in its repository, but those strengths do not offset its abandoned status.
12%
Total Score
0
50
100
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning that maintainers do not intend to support future use.
The latest release was December 5, 2023, and there were no releases in the following 12 months. The 18-release history shows prior development but not current maintenance.
The repository recorded zero commits and zero active maintainers during the last three months. This confirms that current maintenance activity has stopped.
The linked Laminas repository is archived, with its last push on December 5, 2023. An archived source repository is a severe abandonment risk for a dependency.
Both workflows were analyzed without high-confidence findings or untrusted checkout and script-injection risks. However, both of the two action references are unpinned, which is a minor supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aura/di Version ^4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.