The repository has had no commits in the last three months, and the package has made no release in the last year. Clear licensing, tests, release notes, readme, and read-only workflow permissions provide useful transparency, but the 0.0.2 release remains immature.
55%
Total Score
50
50
75
75
There were no commits and no active maintainers in the last three months. This is the strongest abandonment concern in the collected evidence, especially alongside the lack of recent releases.
The package declares 23 runtime dependencies for a broad Symfony and AWS administration bundle. That is a substantial dependency surface to maintain, though the package's feature scope makes a larger profile understandable.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This provides consistent ownership but limited evidence of broad project backing.
The package has only two releases, with no release in the last 12 months; its latest release was about 15 months ago. This points to stalled maintenance despite the roughly 29-day interval between its first two releases.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/form Version ^6.4 | — | — |
doctrine/dbal Version ^4.0 | — | — |
nesbot/carbon Version ^2.72 || ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.