The release remains at v0.2.0 under a single registry maintainer, despite having only three runtime dependencies. The package is abandoned and its source could not be verified, making adoption a poor choice.
15%
Total Score
50
100
17
Packagist marks the entire package as abandoned and names league/container as its replacement, a direct warning against taking a new dependency on it.
The package has only three releases, with the latest in January 2018 and none in the last 12 months; this indicates more than eight years without release activity and a severe abandonment risk.
Only one account has registry publish access, leaving little observable publishing capacity and increasing continuity risk alongside the frozen release history.
The latest version is v0.2.0 rather than a stable major release, which suggests limited maturity; the absence of prerelease labeling provides only a minor counterpoint.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 | — | — |
doctrine/inflector Version ^1.3 | — | — |
doctrine/annotations Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.