The MIT license and Composer-managed dependencies provide clear legal and installation boundaries. Release notes exist for this version, but the prerelease label offers limited stability for consumers.
15%
Total Score
0
100
64
100
Packagist marks the entire package abandoned, with no replacement named. This is a direct warning against taking a new dependency on the package.
The latest release was published nearly six years ago, and there were no releases in the last 12 months. That strongly indicates the package is no longer maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The lack of recent development materially raises abandonment risk.
Version 3.0.beta2 is explicitly a prerelease, so its API and behavior may be less stable than a final release. This is an additional adoption concern alongside the package's abandonment status.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gabordemooij/redbean Version ^5.6 | — | — |
symfony/polyfill-mbstring Version ^1.20 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.