The package is small and clearly documented, with an organization-backed repository and no install-time scripts. Its lack of security policy provides little additional assurance for a dependency that has not seen maintenance.
35%
Total Score
100
67
75
This is the only release, published about nine years ago, with no releases in the last 12 months. That strongly suggests the package is abandoned rather than actively maintained.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external sign of adoption or ongoing community interest.
The repository is not archived, which avoids an explicit abandonment marker, but its last push was on the same day as the sole release about nine years ago. The old repository activity does not compensate for the stagnant release history.
The repository has no security policy. This is a hygiene gap rather than a severe risk, but it offers no documented process for handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/symfony Version ^3.2.4 | — | — |
league/commonmark Version ^0.9.0 | — | — |
zero-config/preacher-installer Version ^1.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.