The package has had no registry releases since January 2018 and no commits in the last three months. Its license, tests, release notes, organization backing, and matching repository provide useful evidence of a real, documented project, but maintenance is currently weak.
58%
Total Score
75
100
88
75
The latest release was in January 2018, with zero releases in the last 12 months, indicating a long period without published maintenance. The exact-version release notes provide some documentation but do not offset the age of the release history.
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of currently inactive development. The repository is not archived, but there is no recent activity to demonstrate ongoing support.
Composer is used as a build tool, showing standard ecosystem tooling. No security scanning tools were detected, which is a minor hygiene gap, but it is not enough here to outweigh the maintenance evidence.
No security policy was found in the linked repository, leaving vulnerability-reporting expectations and response ownership unclear. This is a transparency gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpmentors/domain-kata Version ~1.4 | — | — |
symfony/event-dispatcher Version ~2.8|~3.0|~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.