The project is very small, with one maintainer, one star, no tests, and no security policy. It has a clear README, an MIT declaration, and no install scripts, but those strengths do not offset the age.
43%
Total Score
38
100
78
83
The latest release was in April 2021, about 5 years and 5 months ago, with no releases in the last 12 months. Ten releases arrived in a very short initial burst, but there is no evidence of continuing maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push being about 5 years and 5 months ago. This is strong evidence of abandonment risk.
Only one registry account has publish access. This is a thin publishing base and leaves little visible redundancy if that maintainer becomes unavailable.
The repository is owned by an individual user rather than an organization. Combined with the single registry maintainer, this provides limited visible project backing.
There are no open issues or pull requests and no activity in the last month. A clean tracker is mildly positive, but it does not compensate for the absence of recent development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ~4|~5 | — | — |
symfony/console Version ~4|~5 | — | — |
symfony/validator Version ~4|~5 | — | — |
symfony/http-kernel Version ^4.0 || ^5.0 | — | — |
symfony/event-dispatcher Version ~4|~5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.