It has a usable README, changelog, tests, and a conventional Composer build without install-time scripts. The single-user project has no security policy, leaving little evidence of ongoing stewardship.
35%
Total Score
33
50
67
83
The package has had no release in more than seven years, and no releases in the last 12 months. This is strong evidence that maintenance has stopped.
There were zero commits and zero active maintainers in the last three months, consistent with the release history showing that active development has ended.
The release declares 11 runtime dependencies, including several Symfony and translation components. This is a meaningful integration surface, though the signal does not show an abnormal dependency burden by itself.
Only one registry account has publish access. That is a narrow publishing base, and there is no organizational backing signal to compensate for it.
The repository is owned by an individual account rather than an organization. Combined with the narrow maintainer base, this provides limited visible project backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/nsa Version ^1.1 | — | — |
symfony/intl Version ^2.7 || ^3.0 || ^4.0 | — | — |
symfony/finder Version ^2.7 || ^3.0 || ^4.0 | — | — |
symfony/validator Version ^2.7 || ^3.0 || ^4.0 | — | — |
symfony/translation Version ^2.7 || ^3.0 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.