The package includes a readable guide, tests, release notes, and a clear MIT license. Its small dependency surface and organization-backed repository help, but the project has shown no recent development or release activity.
45%
Total Score
50
100
67
50
This is the package's only release, published in February 2022, with no releases in the last 12 months. That long absence of releases raises abandonment risk, although a small stable component may not need frequent version changes.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no recent development. No provided signal shows ongoing maintenance to offset this.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene limitation, not evidence that the package is unsafe to depend on.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less significant for a small, inactive component than the maintenance evidence.
The assessed version is v0.1.0 and is not marked as a stable major release, so its API maturity is limited. It is not a prerelease, which avoids an additional stability concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^4.4|^5.4|^6.0 | — | — |
symfony/event-dispatcher Version ^4.4|^5.4|^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.