It is a prerelease with no newer registry release for more than three years. MIT licensing, tests, and a README provide useful basics, but they do not offset the package-level withdrawal.
12%
Total Score
50
100
Packagist marks the entire package as abandoned, with no replacement named. Package-level deprecation is a severe adoption risk regardless of its otherwise healthy metadata.
The package has 29 releases, but none in the last 12 months; its latest release was more than three years ago. This indicates a substantial maintenance and abandonment risk.
The assessed version is a prerelease (v1.0.2-RC2), and prereleases make up 35% of recent releases. That weakens confidence in relying on this version for a new dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ~4.4||~5.4||~6.0 | — | — |
symfony/config Version ~4.4||~5.4||~6.0 | — | — |
symfony/routing Version ~4.4||~5.4||~6.0 | — | — |
symfony/http-kernel Version ~4.4||~5.4||~6.0 | — | — |
zircote/swagger-php Version ^4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.