Usable with caveats: it is actively released and has substantial tests and documentation, but maintenance depends entirely on one contributor. Low adoption and missing security practices make it a less established choice for a critical dependency.
68%
Total Score
50
50
81
90
The package declares 13 runtime dependencies, including several Symfony and Doctrine components, which creates meaningful compatibility and update surface. The dependency set is relevant to the bundle's stated functionality but still warrants routine dependency review.
Only one registry account has publish access. Because the repository is user-owned rather than organization-owned, there is no provided organizational backing to offset this concentration.
The registry namespace and repository owner are the same individual account, confirming that the package is correctly tied to its repository. However, the ownership context provides no organizational succession or shared-maintenance support.
One contributor made all 5 commits in the last 3 months, giving the project a complete single-person bus factor. With user ownership and no organization backing, loss of that contributor would materially increase abandonment risk.
The repository had 5 commits in the last 3 months, showing recent maintenance, but all activity came from one active maintainer. This supports ongoing work while leaving continuity dependent on one person.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^6.4|^7.1 | — | — |
symfony/mailer Version ^6.4|^7.1 | — | — |
symfony/process Version ^7.2 | — | — |
symfony/runtime Version ^6.4|^7.1 | — | — |
symfony/orm-pack Version ^2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.