Usable with caveats: it has a strong release cadence, clear licensing, tests in the source repository, and active organizational backing. However, the repository shows no commits or active maintainers in the last three months, so verify ongoing maintenance before adopting it broadly.
68%
Total Score
75
50
88
100
Nine runtime dependencies, including several API Platform and Symfony components, make compatibility across the dependency set important but are reasonable for a framework component.
The repository recorded zero commits and zero active maintainers in the last three months. This conflicts with the frequent registry releases and is the main maintenance concern for this release.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a transparency gap, though it is not by itself evidence that the package is unsafe.
Version v5.0.0 is a stable major release rather than a prerelease, although 55% of recent releases were prereleases, which adds some version-churn risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^7.4 || ^8.0 | — | — |
symfony/type-info Version ^7.4 || ^8.0 | — | — |
api-platform/state Version ^5.0 | — | — |
symfony/filesystem Version ^7.4 || ^8.0 | — | — |
symfony/serializer Version ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.