It includes tests, a README, and a clear MIT license, with no install-time scripts. The linked repository matches the package and uses Composer, but its maintenance and release history provide little support for a current dependency.
35%
Total Score
67
75
The package has made no releases in the last 12 months, and its latest release was in August 2014. This long absence of release activity is strong evidence of abandonment risk.
The repository is not marked archived, which is a positive, but its last push was in August 2014 and does not offset the prolonged inactivity shown by release_history.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it is less important than the package's prolonged inactivity.
The assessed version is a prerelease, not a stable major release, and recent releases are predominantly prereleases. That leaves compatibility and maintenance expectations unclear.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
silex/silex Version >=1.2.0 | — | — |
symfony/security Version >=2.5.0 | — | — |
symfony/validator Version >=2.4,<2.5.3 | — | — |
symfony/http-foundation Version >=2.3,<2.6-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.