Its MIT licensing, clear README, and direct repository match make it easy to inspect. The lack of tests and security policy further limits confidence in long-term maintenance.
38%
Total Score
25
100
56
83
Only two releases were published, with the latest more than 9 years ago and none in the last 12 months. This is strong evidence of an inactive project despite the historical release interval being reasonable.
There were no commits and no active maintainers in the last 3 months, consistent with the last push being more than 9 years ago. This materially raises abandonment risk.
The published artifact includes a README, while tests and a changelog are absent; absent tests and changelogs are normal for package artifacts, but the repository also reports no tests, reducing project maturity evidence.
The source repository is owned by an individual account rather than an organization. Combined with the single registry maintainer and absent recent activity, there is no visible institutional maintenance buffer.
The repository has 0 stars, 1 fork, and 1 watcher. Low popularity is not decisive for a small package, but it provides little supporting evidence of community use or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/serializer Version ^3.2 | — | — |
symfony/property-access Version ^3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.