Symfony Canopee Assets
60%
Total Score
caution
Usable with caveats: one old release and no recent commit activity make ongoing maintenance uncertain.
The artifact has no README, tests, or changelog, while the repository also reports no tests or changelog. Missing tests and changelog are normal for a published asset package, but the absent README weakens consumer guidance.
The repository is owned by a personal GitHub account rather than an organization account, so there is limited direct evidence of organizational backing. The registry maintainer list provides some continuity but does not establish active maintenance.
This package has only one release, published about 1 year 11 months ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain despite the stable 1.0 version.
The repository recorded zero commits and zero active maintainers in the last three months. Even with a recent recorded push, the lack of recent commit activity weakens evidence of ongoing maintenance.
The repository name does not match the package name, and no README package mention was available. That makes the package-to-source relationship less transparent, even though name differences can occur for subpackages.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/ux-icons Version ^2 | — | — |
symfony/twig-bundle Version >=6.3 | — | — |
symfony/ux-translator Version ^2.13 | — | — |
symfony/ux-live-component Version ^2.12 | — | — |
symfony/ux-twig-component Version ^2.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.