The release is stable, documented, licensed, and has no install-time scripts. However, the package is deprecated and its repository is archived, with no commits in the past three months and no releases for over two years.
10%
Total Score
0
58
75
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on it.
The repository recorded zero commits and zero active maintainers in the past three months. Together with the archived status, this supports a conclusion of abandonment rather than a temporary lull.
The linked repository is archived, and its last push was on January 1, 2024. Archived source indicates the project is no longer actively maintained.
The package has 15 releases since July 2020, but none in the last 12 months and the latest release was over two years ago. Its earlier cadence does not offset the current stoppage.
The repository has no security policy. This is a transparency and reporting gap, especially concerning for a package that is no longer maintained.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
openmage/magento-lts Version >=19.4.0 || main-dev || next-dev | — | — |
symfony/polyfill-php80 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.