38%
Total Score
unhealthy
Risky: no maintenance since 2015, only one release, and no license make this release difficult to depend on.
No license is declared, no license file is present in the package, and no repository license file was found. That leaves the legal terms for reuse unclear.
The package has only one release, published in October 2015, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.
There were no commits and no active maintainers in the last three months, although the repository's last push was already in 2015. This confirms that maintenance has effectively stopped.
The repository name matches the package, which supports the linkage, but its README does not mention the package name. This is a modest transparency concern rather than evidence that the repository is unrelated.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these numbers provide no sign of an active community to compensate for inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.