Its small footprint and stable version reduce integration complexity, but the project shows little evidence of ongoing care. The missing license and unclear repository relationship make long-term adoption harder.
42%
Total Score
0
100
69
50
The latest release was over three years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of limited ongoing maintenance.
The repository has had zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No provided signal shows compensating recent maintenance.
The package declares no license, contains no license file, and the linked repository has no license file. This creates a significant adoption and redistribution concern.
The package defines a post-update-cmd lifecycle script, which adds install or update-time behavior that consumers must account for. No dangerous behavior is shown, so this is a modest transparency and maintenance concern rather than a severe risk.
The linked repository name does not match the package name and its README does not mention the package, leaving the package-to-source relationship unclear. A package-specific repository reference would have compensated for this gap, but none is present.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.5 | — | — |
symfony/dom-crawler Version ^5.4 | — | — |
symfony/css-selector Version ^5.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.