Unfit to use for a new dependency. The package is deprecated, its repository is archived, and it has had no registry releases or recent commits for more than seven years. Existing users may be able to keep it running, but ongoing compatibility and security maintenance should not be expected.
18%
Total Score
25
42
50
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk despite the package having an established history.
The package has 12 releases since 2013, but the latest release was over seven years ago and there were no releases in the last 12 months. This strongly indicates that compatibility updates are unlikely.
The repository recorded zero commits and zero active maintainers during the last three months. Together with the archived status and old latest release, this shows no current development capacity.
The linked source repository is archived, so it is no longer an active maintenance venue. Its last push was over three years ago, which reinforces the abandonment risk.
The registry namespace and repository are both backed by the Lexik organization, which supports ownership continuity. Organizational backing does not compensate for the package's explicit abandonment and archived repository.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 | — | — |
symfony/form Version ~2.7|~3.0|~4.0 | — | — |
kriswallsmith/buzz Version ~0.15 | — | — |
symfony/framework-bundle Version ~2.7|~3.0|~4.0 | — | — |
symfony/options-resolver Version ~2.7|~3.0|~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.