Tests, release notes, a clear MIT license, and a matching source repository improve transparency. The prerelease status and limited release history provide little evidence of maturity for a long-term dependency.
42%
Total Score
50
100
69
83
This is the package's only release, published about seven years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. With the last push in 2019, current maintenance capacity is not demonstrated.
There are no open issues or pull requests and no recent issue or pull-request activity. Combined with the old release, this supports a conclusion of little ongoing maintenance.
The repository has one star, no forks, and one watcher. Low adoption is supporting evidence of limited maturity, although popularity alone is not decisive.
Composer and Box provide build tooling, but no security scanning tools were detected. This is a modest supply-chain hygiene gap, not evidence of abandonment on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^4.2 | — | — |
symfony/process Version ^4.2 | — | — |
symfony/filesystem Version ^4.2 | — | — |
yosymfony/collection Version ^1.1 | — | — |
recipe-runner/recipe-runner Version 1.0.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.