Usable with caveats: it is a small, clearly licensed package with tests, documentation, and a release for version 1.0.0. However, the last release and repository push were over three years ago, with no recent commits and no security policy, so verify compatibility before adopting it.
62%
Total Score
50
100
78
90
The repository had zero commits and zero active maintainers in the last three months, a substantial abandonment warning when combined with the release being over three years old.
Only one registry account has publish access. That is a modest continuity risk for an individually owned project, though the linked repository identifies the same owner.
The package has six releases since May 2020, but the latest release was over three years ago and there were no releases in the last 12 months, indicating likely stagnation.
There are no open issues or pull requests and no recent issue or pull-request activity. This is neutral for a quiet stable project, but it does not show active community maintenance.
The repository has one star and no forks or watchers. Popularity is only supporting evidence, but these counts provide little external evidence of ongoing community attention.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^4.4|^5.4|^6.2 | — | — |
symfony/options-resolver Version ^4.4|^5.4|^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.