The stable version, clear README, and declared MIT license support adoption. The single-maintainer project has little visible activity and no security policy, so pin this version only if its current behavior meets your needs.
58%
Total Score
50
100
88
83
Only one registry account has publish access. The repository is owned by an individual rather than an organization, so the thin publisher base provides limited continuity.
The registry namespace and repository owner match, and the owner is an individual. This supports package identity but provides no organizational backing to compensate for the small maintainer base.
The package has 26 releases since June 2019, but none in the last 12 months; its latest release was on October 31, 2023, roughly 3 years before collection. This materially raises abandonment risk.
There were zero commits and zero active maintainers in the last 3 months, consistent with a project that is no longer actively maintained.
There were no new or closed issues and no pull-request activity in the last month. With no recent commits, this offers no evidence of current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^5.2 | — | — |
symfony/filesystem Version ~4.0 | — | — |
symfony/twig-bridge Version ~4.0 | — | — |
overherz/upgrade-builder Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.