The package includes tests, a clear README, and matching MIT licensing. Its small user and maintainer base leaves limited evidence of ongoing support, while the long release gap makes future compatibility work uncertain.
58%
Total Score
50
50
83
75
The package declares nine runtime dependencies, including several Symfony components and Doctrine/JMS libraries. This is a moderate integration surface that increases compatibility maintenance needs, especially for an older release.
Only one registry maintainer account is listed, so publishing continuity depends on a single person. The repository is also user-owned rather than organization-backed, providing no shown compensating support structure.
The registry namespace and repository owner match, but both identify a single user account rather than an organization. That is consistent ownership, but it does not provide organizational backing to compensate for the thin maintainer base.
The latest release was in September 2021, with no releases in the last 12 months and nearly five years since the last published version. This is a meaningful maintenance and compatibility concern.
There were no commits and no active maintainers in the last three months. This directly supports the concern that maintenance has slowed or stopped.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jms/serializer Version ~1.10|~2.1|~2.2|~3.0 | — | — |
symfony/config Version ^3.4|^4.4 | — | — |
doctrine/common Version ^2.6 | — | — |
symfony/http-kernel Version ^3.4|^4.4 | — | — |
symfony/http-foundation Version ^3.4|^4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.