The package includes tests, a README, and a matching MIT-licensed source repository. Its six runtime dependencies and lack of a security policy provide little reassurance for a codebase last updated in 2014.
42%
Total Score
70
50
The latest release was published in April 2014, with no releases in the last 12 months despite the package being over 13 years old. This strongly raises abandonment risk, although the package has a history of 14 releases.
The linked repository is not archived, which is a positive counterweight to the old release history. However, its last push was in April 2014, so the repository remains effectively stale.
The repository has no security policy. This is a transparency and maintenance gap, though it is secondary to the much older release and repository activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzle/guzzle Version >=3.8.1 | — | — |
symfony/event-dispatcher Version >=2.1 | — | — |
webignition/sitemap-model Version >=1.0.4,<2.0 | — | — |
webignition/cookie-url-matcher Version >=0.1,<1.0 | — | — |
webignition/internet-media-type Version >=0.1,<2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.