Its release history shows no releases in the last ten years, and the repository has had no recent commit or issue activity. The package is documented, tested, licensed, and has no install-time scripts, but those strengths do not offset its age.
12%
Total Score
25
50
88
The registry marks the entire package as abandoned, with no replacement specified. Package-level abandonment is a severe dependency-maintenance risk.
The package has had 34 releases since 2013, but none in the last ten years. This strongly indicates abandonment despite its earlier release history.
There were zero commits and zero active maintainers in the last three months, consistent with the archived repository and abandoned registry status.
The linked repository is archived and was last pushed about ten years ago, indicating that active maintenance has ended.
No issues or pull requests were opened or closed in the last month, and two issues remain open. This provides no evidence of current project support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ~1.2 | — | — |
silex/silex Version ~1.0 | — | — |
symfony/form Version ~2.7 | — | — |
symfony/yaml Version ~2.7 | — | — |
doctrine/dbal Version ~2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.