The package contains only five files and has no tests, changelog, or security policy. Its single maintainer and small user base provide little evidence of resilience if maintenance is needed.
42%
Total Score
50
100
75
75
The last release was about 8 years and 8 months ago, with no releases in the past 12 months; this is strong evidence of abandonment for a dependency.
The repository has recorded no commits or active maintainers in the past 3 months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
One registry maintainer is a thin operational base for a package with no recent activity, although the linked repository is owned by the same person.
The package and repository each contain only five files, including one helper source file; this keeps the maintenance surface small but provides little project depth.
The repository is owned by an individual user rather than an organization, so the single-person maintenance base is not offset by organizational backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/var-dumper Version ~3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.