There have been no registry releases in the last 12 months and no repository commits in the last 3 months. The MIT license, release notes, README, and unarchived source repository provide useful transparency and continuity.
68%
Total Score
50
86
100
The package has 10 releases since April 2020, but none in the last 12 months; the latest release was about 15 months ago. This indicates slowing maintenance, though the project has an established release history.
The repository recorded no commits and no active maintainers in the last 3 months. That weakens evidence of active maintenance, although the repository was pushed more recently than the package release.
The repository uses Composer and Make for build tasks, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^2.12|^3.0 | — | — |
league/glide Version ^2.2 | — | — |
symfony/cache Version ^5.4|^6.4|^7.0 | — | — |
symfony/config Version ^5.4|^6.4|^7.0 | — | — |
symfony/finder Version ^5.4|^6.4|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.