The MIT license, small dependency set, and absence of install-time scripts reduce routine adoption concerns. Maintenance evidence is weak, with no tests or security policy and no activity since the initial release. Pin this version only for a narrowly scoped test utility.
38%
Total Score
50
100
69
83
The artifact includes a README entry and a GitHub release, but the README is empty and neither the package nor repository reports tests; this limits transparency for consumers.
This is the only release, published over five years ago, with no releases in the last 12 months; that strongly raises abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive since its initial release.
The repository has zero stars and forks and one watcher; popularity is only supporting evidence, but these counts provide no additional maturity signal.
The repository uses Make and Composer, showing basic build tooling, but it has no security scanning configured; the latter is a minor transparency gap for a stale project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^5.2 | — | — |
psr/http-message Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.