It has a clear MIT license, README, tests, and a small dependency surface. The repository is not archived and matches the package, but its maintenance activity has not produced a release for years.
60%
Total Score
75
100
78
83
The package has had no registry release since June 2019, making the published version substantially stale even though it has a history of 10 releases.
There were no commits and no active maintainers in the last three months, so current repository activity does not demonstrate ongoing maintenance.
The repository has zero stars and forks and one watcher; this is weak supporting evidence for adoption, but popularity alone does not determine package health.
Composer is used for builds, but no security scanning tooling was detected, leaving a modest project-hygiene gap.
The repository has no security policy, which reduces transparency about how vulnerabilities are reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^4.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.