Usable with caveats: the package is licensed, tested, non-deprecated, and backed by an active organization-owned repository. It is very young, has limited commit activity, and the linked repository neither matches the package name nor mentions it in its README.
68%
Total Score
70
100
78
90
Only one registry account has publishing access, creating some release-management concentration; the organization-owned repository provides partial backing for that limitation.
The package is only 57 days old with three releases and a median interval of about 29 days, showing activity but not yet enough history to establish long-term maintenance.
Three commits in the last three months from two active maintainers shows ongoing activity, but the volume is low for establishing strong maintenance momentum.
There were no new issues or pull requests in the last month and no merged pull requests; this is limited evidence of community activity, though it does not prove abandonment.
The repository name does not match the package name and its README does not mention the package, raising concern that the linked repository may not actually document or represent this release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/common Version ^3.4 | — | — |
symfony/process Version ^7.2 | — | — |
symfony/framework-bundle Version ^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.