The package includes a README, tests, release notes, and no install-time scripts. It lacks security scanning and a security policy, adding transparency concerns for an already outdated dependency.
10%
Total Score
25
50
50
75
Packagist marks the entire package as abandoned, with no replacement provided. Package-level deprecation is a severe adoption risk.
The package was last released on October 6, 2014, has had no releases in the last 12 months, and has 5 releases overall. This is strong evidence of abandonment for a dependency released over 12 years ago.
There were no commits and no active maintainers in the last 3 months, consistent with the archived repository and long release gap.
The linked repository is archived, and its last push was on May 4, 2019. An archived source repository is a severe sign that fixes and compatibility work are unlikely.
The package has 3 runtime dependencies, including Silex and its related API package; this is a manageable dependency set, but old dependencies increase maintenance concerns for an abandoned package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
silex/silex Version ~1.1 | — | — |
jms/serializer Version ~0.16.0 | — | — |
marmelab/phpcr-api Version 2.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.