Deployment Tool
32%
Total Score
25
100
63
75
The package has 67 releases since 2014, but its latest release was about 7 years ago and there were no releases in the last 12 months. This long release gap is a substantial abandonment concern despite the historically regular release interval.
The repository recorded 0 commits and 0 active maintainers during the last 3 months, consistent with the package's multi-year release stagnation. No provided activity signal compensates for this lack of current maintenance.
The repository name does not match the package name and its README does not mention the package, so the repository may not actually back this release. This creates a meaningful provenance and maintenance concern.
The package is published under the xolvio namespace, while the linked repository belongs to a different individual user account, AnwarElbo. The mismatch provides no clear organizational backing for ongoing maintenance.
The repository uses Composer, providing expected build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap, though it is less decisive than the stale activity and repository mismatch.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ~2.7|~3.0|~4.0 | — | — |
pimple/pimple Version ~3.0 | — | — |
symfony/console Version ~2.7|~3.0|~4.0 | — | — |
symfony/process Version ~2.7|~3.0|~4.0 | — | — |
deployer/phar-update Version ~2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.