The MIT license, clear README, and modest dependency set make the package easy to inspect and integrate. Its source has no recent activity or security policy, leaving little evidence of ongoing care.
12%
Total Score
0
100
50
75
Packagist marks the package as abandoned at package scope, with no separate replacement identified beyond the same package name. This is a direct warning against taking a new dependency on this release.
The latest release was in September 2016, and there were no releases in the last 12 months. The long period without published maintenance is severe abandonment evidence.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap. This provides no evidence of current maintenance capacity.
The repository name does not match the package name and its README does not mention the package. Although name differences can occur with subpackages, the absence of any README mention makes package ownership less transparent.
The linked repository is not archived, which avoids the strongest repository-level abandonment marker. However, its last push was in October 2016, so this positive signal does not offset the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ^2.8 || ^3.0 | — | — |
symfony/validator Version ^2.8 || ^3.0 | — | — |
symfony/framework-bundle Version ^2.8 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.