It has a clear README, release notes, repository tests, and a matching MIT license. The small dependency surface and absence of install hooks reduce adoption friction.
67%
Total Score
50
100
79
83
Only one registry maintainer is listed. That is consistent with the user-owned repository, but it leaves little publishing redundancy.
The package is only about seven weeks old and has three releases clustered within roughly two hours, so there is too little history to demonstrate sustained maintenance.
One contributor made all seven recent commits, giving the project a complete single-person bus factor with no demonstrated handoff capacity.
Seven commits were made in the last three months, showing recent work, but the short observation period and single active contributor limit evidence of durable maintenance.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^7.3 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.