A single maintainer and no security scanning limit resilience. The project has tests, release notes, a matching repository, and no install scripts; pinning workflow actions would improve build integrity.
67%
Total Score
50
100
89
67
Only one registry maintainer is listed, leaving publishing and maintenance capacity concentrated in a single person.
The registry namespace and repository are owned by the same individual, confirming direct ownership but not providing organizational backing.
There were no commits and no active maintainers in the last three months, which indicates that maintenance has paused after the latest release.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this provides little external adoption signal.
Composer build tooling is present, but no security scanning tools were detected, leaving automated security coverage unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/serializer Version ^7.3 | — | — |
akeneo/api-php-client Version ^11.4 | — | — |
symfony/property-access Version ^7.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.