Usable with caveats: the package is licensed, tested in its repository, non-archived, and has release notes for v3.0.0. However, it has had no registry release in the last 12 months and no commits or active maintainers in the last three months, so verify ongoing maintenance before adopting it.
64%
Total Score
50
100
94
70
There were zero commits and zero active maintainers in the last three months. This is the strongest maintenance concern, particularly alongside the absence of registry releases in the last 12 months.
Composer install, update, and project-creation lifecycle scripts are present. Their presence adds some installation-time complexity, although no dangerous behavior is shown by this signal alone.
This is a mature package with 47 releases since 2017, but it has had no registry releases in the last 12 months despite a historical median interval of about 20 days. That slowdown is a meaningful maintenance concern.
The repository still has open issues and pull requests, and one new pull request appeared in the last month, but no pull requests were merged and no issues were closed during that period. This indicates limited recent throughput.
The repository has no SECURITY.md or equivalent security policy. This is a transparency gap, though it is less severe than evidence of abandoned source activity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^2.0 | — | — |
league/flysystem-bundle Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.