A single registry maintainer limits resilience, and the repository could not be found, reducing transparency. The stable, non-deprecated release and modest dependency set are otherwise reassuring.
55%
Total Score
50
100
83
Only one account has registry publish access, creating limited release resilience and a meaningful single-maintainer risk even though access records do not prove activity.
The package has had no release in the last 12 months, with the latest release about 18 months ago; its 26 releases over roughly four years show it is not immature, but current maintenance is uncertain.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version 5.4.* || ^6.0 || ^7.0 | — | — |
atsmacode/framework Version ^2.0 | — | — |
laminas/laminas-servicemanager Version ^3.20 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.