The package has no tests or security policy, and its single maintainer provides limited continuity. A clear README, Apache-2.0 licensing, and release notes improve transparency, but compatibility with current PHP and dependencies is uncertain.
38%
Total Score
38
50
71
83
This is the only release, published in March 2017, with no releases in the last 12 months; the long absence of updates is strong abandonment evidence.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the package's prolonged lack of releases.
Seven runtime dependencies, including PHP, Guzzle, Symfony components, and Doctrine Cache, create meaningful compatibility surface for a package that has not been updated since 2017.
One registry maintainer is consistent with a small personal project, but it provides little redundancy when the repository shows no recent activity.
The package is backed by a personal repository under the same user namespace, rather than an organization with broader visible ownership capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pimple/pimple Version ^3.0 | — | — |
doctrine/cache Version ^1.6 | — | — |
monolog/monolog Version ^1.22 | — | — |
guzzlehttp/guzzle Version ^6.2 | — | — |
symfony/dom-crawler Version ^3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.