Tests, a substantial README, and release notes provide useful consumer documentation. Maintenance is concentrated in one contributor, with no security policy and no license evidence.
12%
Total Score
67
50
75
The linked repository is archived, which is a severe abandonment signal even though it was pushed recently; archived projects should not be relied on for future fixes.
Neither the package nor the linked repository provides a declared license or license file, leaving the legal terms for use unclear.
The package has only three releases and none in the last 12 months, with the latest registry release on August 1, 2024. This supports the maintenance concern, although the repository shows some recent activity.
All recent commits came from one contributor, leaving no demonstrated active backup for maintenance. Organization backing provides some handoff capacity, but no second active contributor is shown.
Only one commit was recorded in the last three months, indicating very limited recent development activity. This does not offset the repository's archived state.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^5.0 || ^6.0 || ^6.1 || ^6.2 | — | — |
symfony/process Version ^5.0 || ^6.0 || ^6.1 || ^6.2 | — | — |
symfony/filesystem Version ^5.0 || ^6.0 || ^6.1 || ^6.2 | — | — |
wp-cli/wp-cli-bundle Version ^2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.