This is a generally usable and reasonably mature release: it has been published for over four years, has 15 releases including 6 in the last 12 months, is stable, non-deprecated, licensed, documented, and backed by an active non-archived organization repository with tests and CI workflows. The main concern is maintenance momentum: the repository recorded no commits and no active maintainers in the last 3 months, while issue activity is minimal and the project has only 3 stars. Missing security scanning, security policy documentation, and explicit workflow token permissions add transparency and CI-hardening gaps, but the repository remains maintained enough overall to support a cautious dependency decision.
72%
Total Score
75
50
89
80
Seven runtime dependencies, including framework, ORM, filesystem, and form components, create meaningful transitive maintenance surface for a bundle of this scope, though the profile is not unusually large.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, a concrete sign of currently stalled maintenance despite the recent registry release history.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month, providing little evidence of active community maintenance.
The repository has only 3 stars, 1 fork, and 1 watcher, indicating limited external adoption and community redundancy; popularity is supporting evidence, so this is a caution rather than a decisive health failure.
The project uses Make and Composer and has build tooling, but no security scanning tools are configured, leaving a security-process gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.12 || ^3.0 | — | — |
symfony/form Version ^7.0 || ^8.0 | — | — |
league/flysystem-bundle Version ^3.0 | — | — |
doctrine/doctrine-bundle Version ^2.6 || ^3.0 | — | — |
gedmo/doctrine-extensions Version ^3.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.