Risky to adopt: the package has had no release or repository activity since January 2017, with only two releases and very little community uptake. It is clearly packaged, licensed, tested, and not deprecated, but its long abandonment period makes ongoing compatibility and maintenance uncertain.
42%
Total Score
33
100
67
100
Only two releases were published, both in January 2017, with no releases in the last 12 months and a package age of about 9 years. This is strong evidence of stagnation, despite the package remaining non-deprecated.
There were zero commits and zero active maintainers in the last 3 months, alongside a last repository push in January 2017. This strongly indicates the project is abandoned or effectively unmaintained.
The registry namespace and repository owner are both the same individual account, providing consistent ownership context but no organizational backing to compensate for the inactive project.
There are no open issues or pull requests and no issue or pull-request activity in the last month. For this tiny utility that is not inherently unhealthy, but it is consistent with the absence of active maintenance.
The repository name does not match the full package name and its README does not mention the package. Although the linked repository appears structurally related, this mismatch creates some uncertainty that it is the intended source repository.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/serializer Version >=2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.