It includes a clear MIT license, a substantial README, and no install-time scripts. The lack of tests, security policy, and active issue or release handling leaves maintenance risk unresolved.
18%
Total Score
50
50
71
83
The package has only four releases, all from August 2016, with no releases in the last 12 months. This long-standing release silence is strong evidence of abandonment.
The release declares 27 runtime dependencies, creating substantial maintenance and compatibility surface for a package that has not been updated since 2016.
There are no open issues or pull requests and no issue or pull-request activity in the last month. While a quiet tracker can be harmless, here it is consistent with the release and repository inactivity.
The repository has one star, zero forks, and two watchers. Popularity is only supporting evidence, but these counts provide little evidence of a broad community or outside maintenance capacity.
The linked repository is not archived, but its last push was in December 2016. The unarchived status offers little compensation for the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psy/psysh Version 0.7.* | — | — |
symfony/yaml Version 3.1.* | — | — |
nesbot/carbon Version ~1.20 | — | — |
symfony/debug Version 2.8.*|3.0.* | — | — |
symfony/finder Version 2.8.*|3.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.