Unfit to use: the package was abandoned on Packagist and has had no release or repository activity for about 10 years. It is licensed, tested, and transparently backed by a matching repository, but those positives do not offset its replacement recommendation and prolonged inactivity.
15%
Total Score
50
57
83
Packagist marks the entire package as abandoned and points users to a replacement, making this release unsuitable for a new dependency despite the absence of a specific deprecation message.
The package has only three releases, all concentrated in January 2016, with no releases in the last 12 months; this indicates prolonged abandonment rather than merely a slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's decade-long lack of releases and leaving no evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tooling is reported; this is a minor transparency gap rather than the reason the package is unfit.
The linked repository is not formally archived, which is a small positive, but its last push was in February 2016 and the activity signals show that it is effectively inactive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ~2.3|~3.0 | — | — |
symfony/process Version ~2.3|~3.0 | — | — |
guzzlehttp/guzzle Version ~4.0|~5.0|~6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.