The MIT license, substantial README, tests, changelog, and matching repository make the project transparent to use. Its beta status, broad dependency set, missing security policy, and install-time scripts add maintenance and operational concerns.
38%
Total Score
33
50
67
67
The last registry release was about nine years ago, with no releases in the past 12 months. That strongly indicates the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with a project that has effectively stopped receiving maintenance.
The package declares 44 runtime dependencies and 25 development dependencies, creating a large compatibility and maintenance surface for an old beta release.
The package runs post-install and post-update Composer scripts, which increase installation complexity and the amount of code executed during dependency operations.
The registry namespace belongs to one user while the linked repository is owned by another user, with no organization backing shown. This weakens ownership clarity, though the repository itself matches the package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^1.28 | — | — |
payum/payum Version ^1.4 | — | — |
doctrine/orm Version ^2.5 | — | — |
symfony/symfony Version ^3.2 | — | — |
twig/extensions Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.