Simple request wrapper for Symfony HTTP Foundation
70%
Total Score
caution
Usable with caveats: no commits in three months and all six workflow actions are unpinned.
The registry namespace and repository owner are the same individual, so ownership is coherent; the single-person backing also means limited visible maintenance capacity.
The package has existed since June 2021 and released twice in the last 12 months, including this recent version, though its five-release history and roughly 285-day median interval show a slow cadence.
There were no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release and recent repository push provide some counterweight.
The repository has no security policy. This is a transparency gap for reporting vulnerabilities, but it does not by itself show abandonment or unsafe code.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write-wide permissions. However, all six action references are unpinned, weakening build reproducibility and update control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-foundation Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.