The stable v1.0 release and lack of registry deprecation are positives, but its twelve runtime dependencies add maintenance exposure. The repository could not be found, and no newer release has appeared since January 2017.
38%
Total Score
50
50
67
This is a mature package with only one release, published in January 2017, and no releases in the last nine years; the prolonged silence is a strong abandonment concern.
Twelve runtime dependencies, including several framework, transport, and messaging components, increase the maintenance and compatibility surface for an already inactive release.
Two registry publishing accounts provide some continuity, but this metadata does not demonstrate active maintenance or recent contribution activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^3.0 | — | — |
nesbot/carbon Version ^1.21 | — | — |
symfony/config Version ^3.0 | — | — |
symfony/finder Version ^3.0 | — | — |
monolog/monolog Version ^1.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.