Licensing, tests, documentation, and a matching repository support basic transparency. The package has had no release activity for nearly 12 years, and its source has seen no commits for over 8 years; the registry also marks it abandoned.
32%
Total Score
0
71
75
Packagist marks the entire package as abandoned and names symfony/var-dumper as its replacement. This is a direct warning against taking a new dependency on this release.
The last release was in October 2014, with no releases in the past 12 months. Nearly 12 years without a release indicates severe abandonment risk, despite the package having an earlier release history.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with long-term inactivity. The repository is not archived, but that does not compensate for the absence of recent development.
The source repository has no security policy. That weakens vulnerability-reporting transparency, although the package's much larger concern is its long-term inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
raulfraile/ladybug Version ~1.0.0 | — | — |
symfony/framework-bundle Version >=2.0.0 | — | — |
raulfraile/ladybug-plugin-symfony2 Version ~1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.