Risky to adopt: the latest release was published nearly 10 years ago and the repository shows no recent commits or active maintainers. It has tests, a README, a stable MIT license, and a matching source repository, but the long abandonment gap outweighs those positives.
35%
Total Score
25
80
The latest release was published on November 2, 2016, with no releases in the last 12 months. This long period without a release materially increases abandonment and compatibility risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package having been inactive for nearly 10 years. This is a severe maintenance concern despite the repository not being formally archived.
Only one registry account has publish access, leaving the release process dependent on a very small maintainer base. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of broader project capacity to compensate.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
opine/cache Version ~2.0 | — | — |
opine/bundle Version ~2.0 | — | — |
opine/config Version ~3.0 | — | — |
symfony/yaml Version 3.1.6 | — | — |
opine/interfaces Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.