The repository has no recent commit activity and no security policy, while the package remains licensed, documented, and free of install scripts. Its tiny audience and single maintainer make future fixes uncertain.
43%
Total Score
33
50
75
75
The package has made no release in over five years: all three releases, including this one, date from June 2021. That strongly raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
The package declares three runtime dependencies and no development dependencies. This is a modest dependency surface, though the lack of development dependencies also gives little evidence of a maintained test setup.
Only one registry account has publishing access. As the repository is user-owned rather than organization-backed, this leaves a thin publishing and maintenance base.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, providing limited backing for continuity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^5.0 | — | — |
raylin666/contract Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.