The small project has had no recent releases, commits, or issue activity, and its single registry maintainer limits visible continuity. MIT licensing and included tests help, but the missing security policy leaves little evidence of ongoing stewardship.
42%
Total Score
33
78
75
The latest release was about six years ago, with zero releases in the last 12 months. Six releases over the package's lifetime show some history, but the long current gap is a substantial maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates the project is not actively maintained.
One account has registry publish access. The linked repository is user-owned rather than organization-backed, so there is limited visible redundancy in publishing continuity.
There were no new or closed issues or pull requests in the last month, and no open issues or pull requests. This is consistent with an inactive project rather than evidence of active support.
The repository has zero stars, two forks, and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of broad adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
box/spout Version ^3.1 | — | — |
symfony/framework-bundle Version 4.*||5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.