The package is small and clearly documented, with a matching repository and no install-time scripts. Its maintenance appears to have stopped after October 2017, and the repository has no tests or security scanning, so compatibility with current Nette and Sentry versions is uncertain.
38%
Total Score
25
50
60
88
The latest release was about 8 years and 11 months ago, with no releases in the last 12 months and only 3 releases overall. This is strong evidence of abandonment risk, although the package is not deprecated.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. No newer activity is provided to offset the maintenance concern.
The package declares three runtime dependencies, including PHP, Tracy, and Sentry, with no development dependencies. The small dependency surface is positive, but the old release may constrain compatibility with their current versions.
The repository is owned by an individual user rather than an organization, so the single registry maintainer is consistent with the available backing context. This offers limited redundancy if the maintainer is unavailable.
Composer is used for the build, which fits this PHP package, but no security scanning tools are present. This is a hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tracy/tracy Version >=2.1.0 | — | — |
sentry/sentry Version >=0.11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.