The package is clearly licensed and documented, with repository tests and release notes for this version. Its two runtime dependencies are modest, but the project remains a small single-owner effort.
64%
Total Score
50
100
94
83
Only one account has registry publish access. The linked repository is user-owned rather than organization-owned, so this indicates a limited publishing and continuity base.
The registry namespace and repository are owned by the same individual, confirming ownership alignment but offering no organizational backing to offset the small maintainer base.
The package has 12 releases over about 16 months, but only one release in the last 12 months; this suggests a slower recent cadence despite the current release being available.
There were zero commits and zero active maintainers in the last three months. The recent release and repository push provide some counterevidence, but the current maintenance gap remains a concern.
No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though it is not by itself evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^7.2 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.