Risky to adopt: this package has had no release or commit activity for about five years and has almost no project maturity evidence beyond a minimal five-file artifact. It may be usable for a narrow need, but ongoing maintenance and support should not be expected.
42%
Total Score
0
69
75
The package has only two releases, both published about five years ago, with no releases in the last 12 months. This is strong evidence of an inactive project.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring about five years ago. The lack of recent maintenance materially increases abandonment risk.
The release contains only five files: a parser, manifest, README, license, and gitignore. This is transparent and simple, but it provides little evidence of mature development or validation.
The package includes a README and has a GitHub release for this version, but neither the artifact nor repository has tests or a changelog. Those omissions are not inherently wrong for a small compiled or library artifact, though they leave limited evidence of quality.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no additional confidence in a project that is otherwise inactive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version v5.3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.