Risky to adopt: the last release and repository activity are from September 2016, and the README explicitly calls this a development preview that should not be used in production. It has a clear MIT license, tests, and a usable README, but those strengths do not offset the long abandonment risk.
30%
Total Score
50
56
83
The package has had no release in nearly 10 years: its latest release was September 2016, with zero releases in the last 12 months. That sharply raises abandonment and compatibility risk.
The repository is not formally archived, which avoids an explicit abandonment marker, but it was last pushed in September 2016. The stale activity remains a serious maintenance concern.
The package and repository are backed by the same individual account, so there is no ownership mismatch. However, the individual project has no demonstrated recent activity to compensate for the maintenance gap.
There have been no new issues or pull requests and no merged pull requests in the measured month. With the repository already inactive for years, this provides no evidence of ongoing maintenance.
The linked repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption reinforces the concern created by the long inactivity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
robmorgan/phinx Version ^0.6.2 | — | — |
symfony/console Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.