Risky to adopt for new projects: the package has been effectively dormant for over four years, despite having a valid license, documentation, tests in the published artifact, and a matching source repository. It may still work, but ongoing compatibility and maintenance are uncertain.
45%
Total Score
0
50
83
75
All four releases arrived within roughly one day, and there has been no release in over four years. This strongly suggests the package is no longer actively maintained.
The repository has had no commits and no active maintainers in the last three months, with the last push over four years ago. The non-archived status does not compensate for this sustained inactivity.
Four runtime dependencies, including Laravel, YAML handling, and Symfony Process, are a moderate dependency footprint for this utility. This is not a major concern, though each dependency adds compatibility surface for an old package.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, but it is secondary to the package's prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pragmarx/yaml Version ^1.0 | — | — |
symfony/process Version ^3.3|^4.0|^5.0|^6.0 | — | — |
laravel/framework Version >=5.5.33 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.