The package is small, licensed, and straightforward to install. Its 0.5 line and minimal project activity make long-term compatibility and support uncertain.
38%
Total Score
25
75
75
The latest release was published in January 2016, and there have been no releases in the last 12 months despite the package being more than 10 years old. This is strong evidence of abandonment, although the package is not marked deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no observed recent maintenance to offset the risk.
Only one registry account has publish access, leaving little visible publishing capacity. This is a concern for continuity, though registry access alone does not establish whether additional project contributors exist.
The repository has zero stars and four forks, indicating a very small visible user base. Popularity is only supporting evidence, but it provides little external sign of active adoption or review.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This matters more for a package that has shown no recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version >=2.4 | — | — |
symfony/http-kernel Version >=2.4 | — | — |
kriswallsmith/assetic Version ~1.2,>=1.2.1 | — | — |
symfony/dependency-injection Version >=2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.