The repository has tests, release notes, a clear license, and no risky workflow patterns. Security scanning and a security policy are absent, while recent commit activity is currently quiet.
68%
Total Score
50
100
94
80
Only one registry publishing account is listed. The matching user-owned repository and recent release provide some compensation, but the publishing base remains thin.
The registry namespace and repository owner match, but the owner is an individual rather than an organization; this offers no organizational redundancy.
The repository recorded zero commits and zero active maintainers in the last three months. The January 2026 release partly offsets this, but current maintenance capacity is unclear.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month; this is a mild activity concern.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-kernel Version ^5.3|^6|^7|^8 | — | — |
symfony/http-foundation Version ^5.3|^6|^7|^8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.