Its dependency surface is narrow and it has no install-time scripts, limiting operational complexity. Organization ownership and an unarchived repository offer some support, but the project provides little evidence of ongoing stewardship.
40%
Total Score
100
100
50
100
The package has made only one release, on 20 August 2018, with no releases in the past eight years. That is strong evidence of abandonment risk for a library dependency.
No license is declared, and neither the package nor the linked repository contains a license file. This leaves reuse and redistribution rights unclear.
The published package has no README, while the repository also reports no tests or changelog. The missing README modestly hurts consumer transparency, although absent tests and changelog are normal for published artifacts.
The repository is not archived, which is a positive, but it was last pushed on 20 August 2018 and provides no evidence of recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version >=2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.