Clear documentation and tests make integration straightforward. The organization-backed repository and recent release history reduce abandonment concerns, but limited security tooling and workflow pinning leave meaningful maintenance uncertainty.
69%
Total Score
83
100
83
83
The package has existed since June 2020 with 32 releases, but only one release in the last 12 months indicates a slower current cadence.
No commits and no active maintainers were recorded in the last three months, which weakens evidence of ongoing maintenance despite the recent release.
The repository has only 1 star and 0 forks, indicating limited public adoption and a smaller external feedback base; this is supporting caution rather than a verdict.
Composer and Make are used for project tooling, but no security scanning tools were detected, leaving a gap in repository hygiene.
No security policy was found, making vulnerability reporting and response expectations less transparent for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
symfony/cache Version >=6.4 | — | — |
symfony/serializer Version >=6.4 | — | — |
doctrine/collections Version >=1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.