18%
Total Score
0
58
50
The registry marks the entire package as abandoned, with no replacement specified beyond the same package name. Package-level deprecation is a severe adoption risk.
The package has 79 releases and previously released about every 5 days, but its latest release was in August 2022 and it has had no releases in over 4 years.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's prolonged lack of releases and indicating little current maintenance capacity.
The repository has zero stars and forks and one watcher, providing little community evidence or backup around maintenance. Popularity is supporting evidence, so this reinforces but does not determine the verdict.
The linked repository has no security policy. This is a transparency and maintenance gap, although it is secondary to the package-wide deprecation and inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version 4.*|5.* | — | — |
symfony/dotenv Version 4.*|5.* | — | — |
zncore/contract Version v0.0.* | — | — |
illuminate/support Version ^6.1 | — | — |
illuminate/container Version ^6.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.