The repository has tests, release notes, dependency tooling, and a clear MIT license. However, development has been inactive for about two and a half years, and this remains an alpha release with no registry releases for about three years.
55%
Total Score
50
79
67
Only three releases exist, with none in the last 12 months and the latest released about three years ago. This indicates a slow or stopped release cadence, though it is not evidence of deprecation by itself.
There were no commits and no active maintainers in the last three months, consistent with an inactive project. The repository's non-archived status provides only limited compensation.
There are two open issues and one open pull request, with no new or closed activity in the last month. This suggests limited current project responsiveness.
The repository has one star and one fork, indicating very limited external adoption. Popularity is supporting evidence rather than a verdict, but it provides little reassurance about community support.
No repository security policy was found. This reduces transparency for reporting security issues, although it is a secondary concern compared with the inactive release and commit history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/uri Version ^6.5 | — | — |
symfony/config Version ^5.4 || ^6.0 | — | — |
webmozart/assert Version ^1.10 | — | — |
symfony/http-client Version ^5.4 || ^6.0 | — | — |
symfony/http-kernel Version ^5.4 || ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.