Documentation, tests, a changelog, and a matching source repository provide a solid starting point. However, the workflow setup needs cleanup, and the project has no demonstrated release or commit history beyond its first day.
61%
Total Score
50
50
88
75
The bundle declares 29 runtime dependencies, including several Symfony, Doctrine, and Sylius components. That breadth increases compatibility and maintenance burden for adopters.
The repository is owned by an individual account rather than an organization, providing no visible organizational backing to compensate for the package's very limited history.
This is the first recorded release and the package is zero days old, so there is no evidence yet of sustained release maintenance or stability over time.
The repository records zero commits and zero active maintainers in the last three months, although the package itself was published only recently. This is limited maintenance evidence rather than proof of abandonment.
Composer build tooling is present, but no security scanning tools were detected. That leaves a gap in the repository's automated security hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
symfony/uid Version ^7.0 || ^8.0 | — | — |
doctrine/orm Version ^3.3 | — | — |
doctrine/dbal Version ^4.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.