The package has a clear MIT declaration and no install-time scripts, but its tiny artifact offers little evidence about ongoing maintenance. Its four runtime dependencies increase the cost of adopting an unmaintained foundation.
32%
Total Score
50
80
75
The latest release was published in October 2018, with no releases in the last 12 months; nearly eight years without a release is strong evidence of abandonment risk.
The package declares four runtime dependencies and no development dependencies. This is a meaningful dependency surface for a small foundation package, especially when maintenance evidence is weak.
The artifact contains only .gitignore, README.md, and composer.json, which fits a dependency-collection package but provides little implementation or provenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/cache Version ^4.0 | — | — |
doctrine/common Version ^2.8 | — | — |
monolog/monolog Version ^1.23 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.