The MIT license, complete README, tests, changelog, and small dependency surface make the package easy to inspect and integrate. It has no install-time scripts, is not deprecated or archived, and its repository matches the package.
45%
Total Score
25
100
75
83
The latest release was published over 11 years ago, and there have been no releases in the last 12 months. Although 17 releases show earlier development, the long gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's prolonged release inactivity. No provided signal shows recent maintenance to offset this.
There was no issue or pull-request activity in the last month, with one issue still open. This supports the conclusion that the project is inactive, though it is weaker evidence than the absent commits and releases.
Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning is a modest hygiene gap alongside the broader inactivity.
The linked repository is not archived, so it remains technically available. Its last push was over 11 years ago, meaning the unarchived status does not compensate for the lack of maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pimple/pimple Version ~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.