Usable with caveats: the package is licensed, documented, backed by an active organization, and has a matching repository with tests and security tooling. However, it has had no release in the last 12 months and no commits in the last 3 months, while the reported latest version is older than the assessed release.
62%
Total Score
63
100
83
80
No commits and no active maintainers were recorded during the last 3 months, a significant maintenance warning that is only partly offset by the recent repository push timestamp.
The package has 11 releases since July 2022, but no release in the last 12 months despite a historical median interval of about 74 days; this indicates materially slower release activity.
There were three new pull requests in the last month, but none were merged and two issues remain open; this shows some attention without demonstrated recent completion.
The repository has 11 stars and no forks, indicating limited adoption, but popularity is supporting evidence and does not by itself make a small maintained package unsafe to use.
No security policy is present. This is a transparency gap, although it is less concerning because security scanning is reported separately.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.0.0 | — | — |
symfony/config Version ^5.4 || ^6.4 || ^7.2 | — | — |
symfony/http-kernel Version ^5.4 || ^6.4 || ^7.2 | — | — |
symfony/http-foundation Version ^5.4 || ^6.4 || ^7.2 | — | — |
symfony/dependency-injection Version ^5.4 || ^6.4 || ^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.