Usable with caveats: this is a mature, licensed package with a real repository, tests, and a stable release history. Recent maintenance has slowed, and the repository lacks a security policy and explicit workflow token permissions.
72%
Total Score
67
100
89
80
The package has 45 releases across roughly 6 years and released this version within the last year, showing established maintenance; only one release in the last 12 months indicates a slower current cadence.
The repository recorded no commits and no active maintainers in the last 3 months, indicating that maintenance has recently paused despite the repository being pushed in January 2026.
There is only one open issue and no issue or pull-request activity in the last month; this is a mild sign of limited current interaction, though it may also reflect a stable project.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest verification gap.
The repository has no security policy, so users lack documented instructions for reporting vulnerabilities or understanding the project's security response.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 || ^2.0 | — | — |
symfony/config Version ^5.4 || ^6.4 || ^7.3 || ^8.0 | — | — |
pagerfanta/core Version ^3.7 || ^4.0 | — | — |
symfony/routing Version ^5.4 || ^6.4 || ^7.3 || ^8.0 | — | — |
symfony/http-kernel Version ^5.4 || ^6.4 || ^7.3 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.