The repository matches the package and includes a usable README and documentation. The MIT file conflicts with the proprietary manifest declaration, and no security policy is published.
64%
Total Score
50
75
83
The artifact includes an MIT license file and the repository also has one, but the manifest declares the license as proprietary. This mismatch should be resolved before relying on the package's licensing metadata.
Only 3 releases have been published across 690 days, with a median interval of about 9 months, although 2 releases arrived in the last 12 months. This indicates a slow maintenance pace rather than abandonment.
No commits and no active maintainers were recorded during the last 3 months. The recent push associated with the release provides some contrary evidence, but ongoing development activity is still limited.
The repository has 0 stars and 0 forks, with 1 watcher. This provides little adoption evidence, but popularity is only supporting evidence and does not outweigh the maintenance signals.
The project uses Composer for builds, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/orm-pack Version * | — | — |
symfony/ux-icons Version * | — | — |
symfony/ux-live-component Version * | — | — |
knplabs/knp-paginator-bundle Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.