JSON:API 1.1 bundle for Symfony with Doctrine and custom persistence
72%
Total Score
caution
A young, active project is held back by single-contributor maintenance and completely unpinned workflow actions.
The release declares 12 runtime dependencies, mostly Symfony components, which is a substantial but coherent dependency surface for a framework bundle.
The repository is owned by an individual user rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.
Only one contributor made all 6 commits in the last 3 months, leaving no demonstrated backup maintainer and increasing continuity risk.
The repository recorded 6 commits in the last 3 months, showing recent work, but all activity is concentrated in one maintainer.
The repository has only 1 star, 1 fork, and no watchers; this is weak supporting evidence, although popularity alone does not determine package health.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^7.4 || ^8.0 | — | — |
symfony/config Version ^7.4 || ^8.0 | — | — |
symfony/routing Version ^7.4 || ^8.0 | — | — |
symfony/validator Version ^7.4 || ^8.0 | — | — |
symfony/serializer Version ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.