The package is well documented, tested, licensed, and tied to a matching organization repository. Maintenance has stopped since August 2021, and its README says support ended in 2019, making long-term fixes unlikely.
32%
Total Score
25
63
50
The latest release was in August 2021, with no releases in the last 12 months despite 53 releases overall. The long release gap is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, confirming that development is inactive rather than merely slower.
There is only one open issue, with no new or closed issues or pull requests in the last month. This is consistent with a project receiving little ongoing maintenance.
The linked repository is not archived, which is a modest compensating signal, but its last push was in August 2021 and does not offset the inactive commit history.
The repository has no security policy or documented security-reporting process. This weakens transparency for a dependency, although it is secondary to the clear maintenance risks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
prooph/common Version ^4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.