The package includes tests in its repository, clear usage documentation, and an explicit MIT license. However, the abandoned registry status and more than six years without a release or commit make ongoing compatibility and maintenance unlikely.
15%
Total Score
0
64
50
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on the release.
The latest release was over six years ago, with no releases in the last 12 months and only three releases overall. That strongly indicates the package is no longer maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This leaves compatibility and defect fixes uncertain.
The repository has only 4 stars, 1 fork, and 1 watcher. Low popularity is supporting evidence of limited adoption, though it is outweighed by the stronger maintenance signals.
The linked repository has no security policy. For an encryption bundle, that reduces transparency around reporting and handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.5 | — | — |
symfony/config Version ~3.4|~4.0 | — | — |
doctrine/common Version ~2.7 | — | — |
symfony/console Version ~3.4|~4.0 | — | — |
paragonie/halite Version ^4.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.