The package has an MIT license, a usable README, tests, and no install-time scripts. Its small project footprint, absent security policy, and lack of security scanning leave little evidence of ongoing support; pin this version only if its old Symfony integration is still required.
42%
Total Score
25
72
88
The package has had no releases in more than nine years: its latest release was October 2016, with zero releases in the last 12 months. That is strong evidence of abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the lack of releases and indicating that maintenance has effectively stopped.
There was no new or closed issue or pull-request activity in the last month, and no pull requests were open, providing no evidence of current project support.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no community-maintenance buffer for an otherwise inactive project.
Composer is used as a build tool, but no security-scanning tooling is present, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.