The package includes clear documentation, a changelog, repository tests, a matching license, and Composer/Box build tooling. Its lone registry maintainer and absent security policy provide little additional continuity or disclosure support.
38%
Total Score
0
79
50
The package has 269 historical releases, but its latest release was nearly seven years ago and it had no releases in the last 12 months. That long gap outweighs the otherwise mature release count.
There were no commits and no active maintainers in the repository during the last three months, reinforcing the evidence of long-term abandonment.
The linked repository is not archived, so it remains technically available; however, its last push was nearly seven years ago, consistent with the maintenance concern shown by release_history.
The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented. This is a secondary transparency gap beside the much larger maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
amphp/amp Version ^2.1 | — | — |
sebastian/diff Version ^3.0 | — | — |
webmozart/glob Version ^4.1 | — | — |
symfony/console Version ^3.3||^4.0 | — | — |
nikic/php-parser Version ^4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.