The package includes tests, a matching source tree, and an unarchived repository. Install-time hooks and the lack of a security policy add maintenance friction, while recent commit activity is absent.
57%
Total Score
50
100
80
50
The latest registry release was in December 2020, with no releases in the last 12 months; this is a substantial freshness and abandonment concern despite 13 historical releases.
The package defines post-install and post-update Composer scripts, increasing installation complexity and the trust surface for consumers.
The repository recorded zero commits and zero active maintainers in the last 3 months, which weakens evidence of ongoing maintenance even though it is not archived.
The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^4.0 || ^5.0 | — | — |
consolidation/robo Version ^2.0 | — | — |
codeception/codeception Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.