The package has a clear MIT license, a useful README, repository tests, and a small runtime dependency set. Its single-user ownership and lack of security policy leave less oversight if maintenance needs resume.
52%
Total Score
33
100
81
50
The latest release was in September 2016, roughly 10 years ago, despite 27 historical releases. This is strong evidence of stale published maintenance and materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this points to very weak current maintenance capacity.
The registry and repository are owned by the same individual account rather than an organization. That is consistent ownership, but it also means the project has limited visible institutional backing.
There were no new or closed issues or pull requests in the last month, with nine open issues and three open pull requests. This indicates limited current project interaction and adds to the maintenance concern.
Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ~2.0|~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.