Its small footprint and lack of security tooling leave little evidence of ongoing support. The minimal README also gives consumers little integration guidance.
12%
Total Score
0
36
50
Packagist marks the entire package as abandoned, with no replacement named. Package-level deprecation is a severe adoption risk because future fixes and compatibility work are unlikely.
The package has 29 releases, but none in the last 12 months; its latest release was over 7 years ago. This strongly indicates abandonment rather than merely a slow cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with its archived state and providing no evidence of current maintenance.
The linked repository is archived and was last pushed over 7 years ago, indicating that active development has ended.
The artifact has a README, but it is only 36 characters long and offers essentially no usage guidance. The absence of tests and a changelog in the published artifact is normal packaging practice and is not a gap here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.6 | — | — |
symfony/config Version ^3.4 || ^4.0 | — | — |
symfony/http-kernel Version ^3.4 || ^4.0 | — | — |
symfony/dependency-injection Version ^3.4 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.