The package includes tests, a changelog, release notes, and a clear dependency set. Its organization backing helps offset limited community visibility, while the absent security policy and scanning reduce transparency.
76%
Total Score
83
86
83
The package has only two releases over about 4 days and is 80 days old, so its maintenance record is still short even though the latest release is recent.
All 4 recent commits came from one contributor, creating a narrow maintenance base; the organization-owned repository provides some compensation through potential handoff capacity.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in ongoing project hygiene.
The repository has no security policy, reducing transparency about vulnerability reporting and maintenance expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.0 | — | — |
symfony/yaml Version ^6.4 || ^7.0 | — | — |
achttienvijftien/service-container Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.