62%
Total Score
50
50
60
100
No declared license and no license file were found, leaving the legal terms for redistribution and use unclear. This is a direct transparency and adoption concern rather than a cosmetic metadata gap.
The package declares 14 runtime dependencies across Symfony, Doctrine, Slim, PHP-DI, PHPMailer, and related components. This is a substantial dependency surface that increases upgrade and compatibility burden, but it is not inherently unhealthy.
Only one account is listed with registry publish access. This does not prove actual maintenance activity, but it indicates a thin administrative ownership base and limited apparent redundancy if that maintainer becomes unavailable.
The artifact includes tests and a README, but the README is still an uncustomized GitLab template and no changelog is present, which weakens project maturity and release transparency.
Version 0.8.4.2 is not a stable-major release, so downstream users may face breaking changes before a 1.0 release. It is not a prerelease, and recent releases show no prerelease activity, partially reducing that concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/psr7 Version 1.7.1 | — | — |
slim/slim Version 4.15.2 | — | — |
doctrine/orm Version 3.5 | — | — |
php-di/php-di Version 7.1.1 | — | — |
symfony/cache Version 7.4.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.