The MIT license, published tests, and matching source repository make the package easy to inspect. Maintenance has stopped, so use the listed replacement, search-bundle, instead.
8%
Total Score
0
50
50
Packagist marks the entire package as abandoned and names search-bundle as its replacement. This is a direct warning against adopting the release.
The latest release was in June 2020, with no releases in the last six years despite a history of only six releases. This indicates the package is no longer maintained.
The repository had no commits and no active maintainers in the last three months. Together with the archived status, this confirms inactive development.
The linked repository is archived, and its last push was in September 2021. An archived source project has severe abandonment risk for a dependency.
Composer is used for builds, but no security scanning tool was detected. This is a modest supply-chain hygiene gap alongside the stronger abandonment evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.7.1 | — | — |
symfony/console Version ^4.0 || ^5.0 | — | — |
symfony/stopwatch Version ^4.0 || ^5.0 | — | — |
symfony/http-kernel Version ^4.0 || ^5.0 | — | — |
mmoreram/base-bundle Version ^2.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.