Risky to adopt: the package has not released or received repository commits in nearly six years. It remains licensed, documented, tested, and backed by a matching organization repository, but the lack of current maintenance makes future fixes and compatibility uncertain.
42%
Total Score
50
75
The latest release was in December 2020, with no releases in the last 12 months, indicating a prolonged lack of published maintenance for a library dependency.
The repository recorded no commits and no active maintainers in the last three months, reinforcing that maintenance has effectively stalled rather than merely slowing.
The repository is not archived, which is a positive sign, but its last push was in December 2020 and does not offset the prolonged inactivity shown by release and commit history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
atlas/pdo Version ^1.1 | — | — |
siriusphp/sql Version ^1.2 | — | — |
symfony/inflector Version ^4.4 | — | — |
doctrine/collections Version ^1.6 | — | — |
psr/event-dispatcher Version 1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.