The package includes a readable README, tests, a matching source repository, and an MIT declaration. However, it has had no new release or recent repository activity for about seven years, with only one release and minimal adoption. Its lack of security scanning further reduces confidence for a new dependency.
38%
Total Score
50
50
69
75
This is the package's only release, published about seven years ago, with no releases in the last 12 months. That strongly suggests the project is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long period since its last release. There is no provided evidence of ongoing maintenance.
The package declares four runtime dependencies, including the PHP platform, database support, caching, and another package. This is a moderate dependency surface, but no problematic dependency pattern is shown.
The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of broad community use or review. Low popularity alone is not disqualifying, but it offers no meaningful support for this otherwise stale project.
Composer is used as the build tool, which supports reproducible project structure, but no security scanning tools are present. The missing scanning is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/cache Version ^4.3@dev | — | — |
yb98k/yb-buried Version ^1.0.4 | — | — |
illuminate/database Version ~5.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.