The package has a clear README, tests, and a matching repository, which help explain how to use it. Its three runtime dependencies are modest, but the repository has no security policy or scanning.
35%
Total Score
0
100
67
50
The latest release was about 7 years ago, with no releases in the last 12 months. The 23-release history shows past activity but does not offset the prolonged halt.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the last push being about 7 years ago. This is a strong abandonment concern.
No license is declared, and neither the package nor repository contains a recognized license file. This creates a genuine adoption and redistribution concern.
Composer build tooling is present, supporting reproducible package management, but no security scanning tools were detected. The build setup is useful but does not address maintenance risk.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. No security scanning tools are present to compensate for that gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^4.3 | — | — |
symfony/console Version ^4.2 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.