The package is small and clearly licensed, but its source has had no commits or releases for about two years. A one-person project with no tests, security policy, or package mention in the repository leaves limited evidence of ongoing maintenance.
58%
Total Score
50
100
75
75
Only one registry publishing maintainer is listed, and the repository is owned by a user rather than an organization. This leaves limited demonstrated publishing redundancy.
A README is present, but it contains only 15 characters and neither the package nor repository reports tests or a changelog. Missing tests and changelog are normal packaging practice, while the minimal README limits consumer guidance.
The registry namespace and repository are tied to the same individual account, but the owner type is User rather than an organization. This supports ownership consistency without showing broader project backing.
The package has five releases since October 2021, but none in the last 12 months and the latest release was about two years ago. This is meaningful evidence of slowing maintenance.
There were zero commits and zero active maintainers during the last three months, consistent with an inactive project and increasing abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ^4.3 || ^5.0 || ^6.0 | — | — |
symfony/config Version ^4.3 || ^5.0 || ^6.0 | — | — |
symfony/console Version ^4.3 || ^5.0 || ^6.0 | — | — |
symfony/http-kernel Version ^4.3 || ^5.0 || ^6.0 | — | — |
symfony/http-foundation Version ^4.3 || ^5.0 || ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.