The package includes tests, a README, matching source ownership, and a clear Apache-2.0 license. Its release and repository activity are long dormant, leaving compatibility and maintenance risk for new adopters.
40%
Total Score
50
75
100
The latest release was about nine years ago, with no releases in the last 12 months. Although the package has 60 releases and a historically regular cadence, the prolonged pause indicates likely abandonment.
The repository has had zero commits and zero active maintainers in the last three months, reinforcing the long release gap and leaving no evidence of current maintenance.
There has been no issue or pull request activity in the last month, while one issue and one pull request remain open. This is additional evidence of limited ongoing maintenance, though not severe on its own.
Composer is used as the build tool, but no security scanning tools are reported. This is a modest repository hygiene gap, while the package's larger concern remains its lack of recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jbbcode/jbbcode Version ~1.3.0 | — | — |
gregwar/captcha-bundle Version ~2.0.2 | — | — |
symfony/swiftmailer-bundle Version ~2.3.0 | — | — |
friendsofsymfony/http-cache-bundle Version ~1.3.6 | — | — |
open-orchestra/open-orchestra-base-bundle Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.