Risky to adopt: the package has had no registry release for about eight years and its repository shows no recent commits or maintainers. A clear BSD-3-Clause license, tests, and a changelog provide useful transparency, but they do not offset the strong abandonment risk.
38%
Total Score
38
100
67
90
The package has 78 releases and a historically regular cadence, but its latest release was in August 2018 with no releases in the last 12 months. This long release gap is a serious maintenance concern.
There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is strong evidence that the project is no longer actively maintained.
Only one registry publishing maintainer is listed. A single maintainer increases continuity risk, and the repository activity signals provide no evidence of an active backup maintainer.
The package is associated with a user-owned repository rather than an organization-backed project, and the registry namespace differs from the repository owner. This provides limited visible institutional backing for continued maintenance.
There were no new issues, pull requests, or merges in the last month, and no pull requests are open. This indicates no visible current maintenance or community response activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sebastian/exporter Version ^3.1 | — | — |
doctrine/instantiator Version ^1.0.5 | — | — |
phpunit/php-text-template Version ^1.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.