Its small dependency footprint and lack of registry deprecation are positives. A single maintainer and nearly six years without a release leave maintenance and transparency risks unresolved.
38%
Total Score
50
100
50
The latest release was published in November 2020, with no releases in the last 12 months; nearly six years without a release is a strong abandonment concern despite the package's long history and 13 total releases.
Only one account has registry publish access. That does not prove inactivity, but it indicates a thin publishing base and increases continuity risk when releases have already stopped.
Version 0.7.0 is not a stable major release, so the package has not reached a stable 1.0 line; this adds some maturity risk alongside the inactive release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version >3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.