The MIT license, documentation, and repository tests provide useful transparency. Its stable package structure and limited dependencies cannot compensate for the absence of ongoing maintenance.
15%
Total Score
67
100
56
83
Packagist marks the entire package as abandoned and names getwarp/criteria as its replacement. This is a direct adoption warning beyond a single withdrawn release.
The package has had no releases in nearly five years, despite having seven releases overall. The long inactivity reinforces the abandonment concern.
There were zero commits and zero active maintainers in the last three months. This confirms that maintenance has stopped rather than merely slowing.
The linked repository is archived, with its last push nearly five years ago. Archived source removes the normal path for fixes and maintenance.
Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a minor hygiene gap, secondary to the abandonment signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webmozart/assert Version ^1.6 | — | — |
webmozart/expression Version ^1.0 | — | — |
symfony/property-access Version ^4.4|^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.