Risky to adopt: Packagist marks this package abandoned, and it has had no releases or repository commits for about 17 months. The linked organization repository, tests, license, and release notes provide useful transparency, but they do not offset the clear abandonment risk.
38%
Total Score
50
100
72
88
Packagist marks the package abandoned at package scope and points to flowpack/varnish as the replacement, making this release risky to adopt despite other healthy project signals.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern rather than showing ongoing maintenance.
The package has a long history with 42 releases, but it has had no release in the last 12 months; the latest release was about 17 months ago, which indicates stalled maintenance.
There are only three open issues and no issue or pull-request activity in the last month, consistent with a quiet project and adding to the maintenance concern.
The repository has modest popularity with 20 stars and 16 forks; this supports that it has some usage but does not materially offset the lack of recent maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^9.0 | — | — |
php-http/curl-client Version ^2.2 | — | — |
friendsofsymfony/http-cache Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.