The package includes tests, a changelog, and a clear README. A single maintainer, no security scanning, and broad dependencies leave limited evidence of long-term resilience.
67%
Total Score
50
50
86
67
The package declares 24 runtime dependencies, including several Symfony, Doctrine, and Sylius components. The breadth is plausible for this bundle but increases compatibility and maintenance surface.
Only one registry maintainer is listed. That is not inherently unhealthy for a user-owned project, but it leaves little visible publishing redundancy.
The package is only 2 days old, with 5 releases and a median interval of about 1 hour 17 minutes. This shows active initial iteration but provides little evidence of sustained maintenance.
No commits or active maintainers were recorded in the last 3 months, but the repository is only 2 days old. This is insufficient history rather than evidence that established maintenance has collapsed.
Composer build tooling is present, but no security scanning tool was detected. That is a modest transparency and review gap for a package with database and framework integrations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
symfony/uid Version ^7.0 || ^8.0 | — | — |
doctrine/orm Version ^3.3 | — | — |
doctrine/dbal Version ^4.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.