浏览器通过websocket来调用服务器方法, 适用于大量服务器交互的web app
32%
Total Score
unhealthy
Risky: one release in eight years, no recent maintenance, and a GPL-2/GPL-3 license mismatch.
This package has had only one release, first published eight years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.
There were no commits and no active maintainers in the last three months. Given the package's age and one-release history, this is strong evidence of inactive maintenance.
The repository is not archived, but it was last pushed eight years ago, which is consistent with the package's long period without releases and reinforces maintenance concerns.
A GPL-2.0-only manifest declaration conflicts with the detected GPL-3.0 license file, creating a material licensing ambiguity despite the presence of license files.
The registry lists one maintainer account. A single-user publishing base provides limited continuity for an old package with no recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/var-dumper Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.