Its stable version, small dependency surface, release notes, and repository tests reduce migration friction. That does not offset the lack of future maintenance.
15%
Total Score
50
100
57
100
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning that future fixes and support should not be expected.
There were zero commits and zero active maintainers in the last three months. This supports the abandonment warning rather than showing ongoing maintenance.
The linked repository is archived, confirming that the project is no longer intended for active development, despite being pushed recently for the 3.8.0 release.
The package has 79 releases over about 6 years and one release in the last 12 months, indicating a mature history but sharply limited recent activity.
Composer is used for builds, but no security scanning tools were detected. This is a secondary hygiene gap and is outweighed by the stronger abandonment evidence.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.