The package is licensed, has a matching repository, and includes repository tests plus release notes. Its small community and absent security tooling provide little reassurance for long-term maintenance.
38%
Total Score
0
67
50
The latest release was published in January 2017, and there have been no releases in the last 12 months. This long period without published maintenance is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the stalled release history.
The repository has 1 star, 0 forks, and 1 watcher, indicating very limited visible adoption and a small support ecosystem. Popularity is supporting evidence rather than a verdict, but it does not offset the inactivity.
Composer is used for the build, which is appropriate, but no security-scanning tools were detected. The missing scanning reduces maintenance assurance, though it is not evidence of a security defect.
The repository has no security policy, leaving no documented channel or process for reporting and handling security issues. This is a transparency gap for a package that generates service definitions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wingu/reflection Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.