sinsquare/silex-yaml-loader
The package includes tests and a small, clearly scoped dependency set. Its documentation is minimal, and the repository has limited security and maintenance process evidence.
38%
Total Score
0
100
64
75
Health Score Breakdown
The package has only two releases, both in September 2017, and none in roughly 9 years. This is strong evidence of abandonment for a dependency that may need compatibility maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long period since its last release. No provided maintenance signal compensates for this inactivity.
Neither the package metadata nor the available files provide a license. That creates a direct legal and adoption concern for downstream projects.
The repository name matches the package, which supports the linkage, but its README does not mention the package. This weakens transparency about how the repository relates to the published artifact.
Composer build tooling is present, but no security scanning tools were detected. This is a process gap, though it is secondary to the package's prolonged inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 silex/silex Version ^2.0 | — | — |
symfony/yaml Version ~2.8|^3.0 | — | — |
symfony/config Version ~2.8|^3.0 | — | — |
symfony/dependency-injection Version ~2.8|^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.