The package includes a README, tests, and a clear MIT license, and it is not marked deprecated or archived. Its small dependency set is reasonable, but the lack of security scanning and policy provides limited additional assurance.
38%
Total Score
50
100
71
75
The only release was published about 12 years ago, with no releases in the last 12 months. This strongly suggests the package is abandoned, despite having five historical releases.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release hiatus and leaving current maintenance unverified.
The linked repository name does not match the package name and its README does not mention this package. That makes package ownership and source alignment less transparent.
The repository has only 1 star, 0 forks, and 1 watcher. Popularity is not decisive, but this provides little supporting evidence of active community use or review.
The repository has no security policy. For a package that handles database backups, this is a meaningful transparency gap, although it does not by itself indicate unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
knplabs/gaufrette Version 0.2.*@dev | — | — |
symfony/framework-bundle Version >=2.1 | — | — |
knplabs/knp-gaufrette-bundle Version 0.2.*@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.