The package has a clear README, matching repository, MIT licensing, and a modest dependency set. Install-time scripts are absent, but its very small footprint and lack of security tooling leave little evidence of ongoing maintenance.
42%
Total Score
0
100
67
75
The package has only 3 releases, with no releases in about 11 years; its last release was in March 2015. This strongly raises compatibility and abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and providing no evidence of current maintenance.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive, but these counts provide no supporting evidence of broad community review or adoption.
Composer is used for the build, but no security-scanning tooling is present. For a package that has been inactive for years, this is a modest transparency and maintenance concern.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency gap, especially alongside the long inactivity period.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-kernel Version ~2.1 | — | — |
symfony/http-foundation Version ~2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.