A Dependency Injection Container based on Pimple
45%
Total Score
unhealthy
Risky: no release or commit activity since 2016, with a single maintainer and minimal repository adoption.
The package has had no release in more than 10 years, with zero releases in the last 12 months. This is the strongest evidence of abandonment risk despite its established age.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no observed ongoing maintenance.
Only one registry maintainer is listed, leaving limited visible publishing capacity. The organization-owned repository provides some backing, but no recent activity demonstrates that it is active.
The repository has 1 star and no forks, offering little evidence of broad adoption or a community that could help sustain it. Popularity is supporting evidence rather than decisive on its own.
No security policy is present in the repository. This is a transparency and response-process gap, though it is secondary to the package's much older maintenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pimple/pimple Version ^3.0 | — | — |
container-interop/container-interop Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.