The package includes its license, tests, changelog, and a clear README. A security policy and no install-time scripts add useful safeguards.
56%
Total Score
50
83
100
The registry shows 237 releases concentrated on one day, with no releases in the last 12 months. That unusual burst followed by a long pause raises maintenance and release-traceability concerns.
The repository had zero commits and zero active maintainers in the last three months. This indicates little recent development activity, despite the repository not being archived.
The assessed release is v7.3.2, while the registry reports v6.1.12 as the latest version. The mismatch makes version state harder to interpret and lowers confidence in release metadata.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/polyfill-intl-idn Version ^1.10 | — | — |
symfony/polyfill-mbstring Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.