It has an MIT license, tests, a changelog, and no install-time scripts. However, no commits or releases have appeared since June 2017, so fixes and compatibility work are unlikely.
38%
Total Score
0
75
83
The package is about 9 years old, but it has had no releases in the last 12 months and its latest release was in June 2017. This is strong evidence of abandonment despite 25 historical releases.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, providing no evidence of ongoing maintenance to offset the old release history.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is supporting evidence rather than decisive, but these figures provide little additional confidence in long-term support.
Composer is used for builds, but no security-scanning tools were detected. This is a modest hygiene gap and does not outweigh the more serious maintenance concerns.
The repository has no security policy, leaving vulnerability-reporting and response practices undocumented. This adds a transparency gap to the already stale maintenance picture.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
midgard/createphp Version ^1.1 | — | — |
symfony/assetic-bundle Version ^2.1 | — | — |
symfony/framework-bundle Version ^2.3 | — | — |
friendsofsymfony/rest-bundle Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.