Clear documentation, tests, and release notes make the package easier to evaluate and maintain locally. Its long release gap and inactive recent development leave compatibility and abandonment concerns, while the missing security policy is a smaller transparency gap.
58%
Total Score
25
80
50
The latest registry release was about 10 years ago, with no releases in the last 12 months. Earlier releases were regular, but the prolonged pause is a meaningful maintenance concern.
The repository recorded no commits and no active maintainers in the last 3 months. A push in May 2022 shows it is not necessarily abandoned, but current development is inactive.
There were no new or closed issues or pull requests in the last month, while 11 issues remain open. This supports the concern that maintenance and issue response have slowed.
The linked repository has no security policy, reducing transparency about vulnerability reporting and response. This is a modest gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mathielen/import-engine Version >=0.8.6 | — | — |
symfony/framework-bundle Version ~2.4|3.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.