Usable with caveats: the package is licensed, clearly backed by its matching repository, and has a stable release with release notes. However, the last registry release was over 10 years ago and the repository has had no commits in the last 3 months, so compatibility and maintenance risk are significant.
58%
Total Score
38
50
72
88
The package has only four releases and none in the last 12 months; its latest release was over 10 years ago, which raises substantial compatibility and abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the concern that maintenance has effectively stopped.
The package declares three runtime requirements, including PHP, Doctrine Common, and Symfony Form. This is a modest dependency surface, but those framework dependencies can increase compatibility concerns for a release this old.
A single registry publisher is consistent with the repository being owned by an individual, but it also indicates a limited publishing base if that maintainer becomes unavailable.
The registry namespace and repository owner match an individual account, providing direct ownership alignment but no organizational backing to broaden maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version >=2.2 | — | — |
doctrine/common Version >=2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.