The repository includes tests, release notes, and a matching organization-backed source. Workflow references are unpinned, and no security policy or scanning is reported.
62%
Total Score
88
100
78
50
This is a mature package with 15 releases since November 2015, but it has had no registry release in roughly 20 months despite a previously regular median interval of about 86 days.
There have been no commits and no active maintainers in the last three months, consistent with the package's long maintenance pause and increasing abandonment risk.
The repository has no stars and one fork, indicating limited adoption evidence, but popularity is supporting evidence and does not by itself make a small stable library unhealthy.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The linked repository is not archived and was last pushed with the assessed release in January 2025, although that does not offset the subsequent inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6 || ^7 | — | — |
symfony/console Version ^6 || ^7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.