Tests, release notes, and an MIT license make the project straightforward to evaluate. The organization-owned repository is not archived, but recent source activity is quiet and workflow dependencies are unpinned.
66%
Total Score
75
90
50
The latest release was published in June 2024, with no releases in the following two years, which raises maintenance and compatibility uncertainty despite seven total releases.
The repository had no commits and no active maintainers in the three months before collection, indicating quiet ongoing development even though it was pushed more recently than the release.
The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence of unsafe code by itself.
Both analyzed workflows completed successfully with no detected high-confidence findings or overly broad top-level write permissions, but all six action references are unpinned, leaving avoidable build-reproducibility risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ^6.0|^7.0 | — | — |
symfony/validator Version ^6.0|^7.0 | — | — |
symfony/serializer Version ^6.0|^7.0 | — | — |
symfony/translation Version ^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.