The README, repository tests, and package-to-repository match provide useful transparency. Pin the replacement package thomasvargiu/laminas-messenger instead, because this package is no longer maintained.
12%
Total Score
33
100
56
83
Packagist marks the entire package as abandoned and names thomasvargiu/laminas-messenger as its replacement. Package-level deprecation is a direct warning against taking a new dependency on this release.
The package has had only 4 releases, all concentrated between November 4 and November 28, 2019, with no release in more than 6 years. This shows prolonged inactivity and raises abandonment risk.
The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with its archived state and the package's long release gap.
The linked repository is archived, and its last push was on January 21, 2020. An archived source project is not expected to receive maintenance or fixes.
Only one registry account has publish access. A single maintainer can be adequate for a small package, but here it provides little resilience alongside the archived repository and absent recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 | — | — |
symfony/messenger Version ^4.4 || ^5.0 | — | — |
symfony/event-dispatcher Version ^4.3 || ^5.0 | — | — |
zendframework/zend-servicemanager Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.