The package includes tests, a changelog, a matching MIT license, and a repository that clearly belongs to it. However, it has had no release or repository commit activity since February 2016, making abandonment a serious concern.
42%
Total Score
25
75
50
The latest release was over 10 years ago, with no releases in the last 12 months. The 37-release history shows past activity but does not offset the prolonged absence of updates.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package having been abandoned for years.
The source repository is owned by an organization, providing some project ownership context. No recent activity is shown to demonstrate that this backing remains active.
The repository is not marked archived, which is a small positive, but its last push was in February 2016 and this does not compensate for the lack of current activity.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern compared with the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ~1.17 | — | — |
easyframework/collections Version ~3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.