The package is small and includes tests, a clear MIT declaration, and no install-time scripts. Its single maintainer and lack of security tooling provide little support for long-term maintenance.
40%
Total Score
25
100
67
75
This is the only release, published roughly seven years ago, with no releases in the last 12 months. That strongly raises abandonment risk.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and reducing confidence in ongoing maintenance.
One registry maintainer is reasonable for a small user-owned project, but it leaves little visible maintenance capacity when combined with the absence of recent activity.
The package contains tests, which is a positive, but it has no README for consumers of this library. The missing changelog is not a concern for the published artifact.
Composer build tooling is present, but no security-scanning tooling was detected. This is a modest repository-hygiene gap rather than evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/serializer Version >=3.0 | — | — |
symfony/http-foundation Version >=3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.