The package is licensed, tested, and clearly documented, with no install-time scripts or deprecation. Its last release and repository activity are about 17 months old, and the repository has no security policy or scanning.
60%
Total Score
50
50
83
88
The package declares 19 runtime dependencies, including several storage integrations. This is a relatively broad dependency surface, though it fits a Symfony file-management bundle and is not by itself evidence of poor health.
The package and repository are owned by the same individual account rather than an organization. That is consistent ownership, but it indicates a thinner backing structure than an organization-owned project.
The package has had no release in the last 12 months; its latest release was about 17 months ago. Six releases over its lifetime show some history, but the current pause lowers maintenance confidence.
There were no commits and no active maintainers in the last 3 months, consistent with the roughly 17-month release gap. This is a meaningful sign of slowed maintenance.
There were no new or closed issues or pull requests in the last month. With no recent commits, this provides little evidence of active project engagement.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ^7.0 | — | — |
symfony/mime Version ^7.0 | — | — |
symfony/yaml Version ^7.0 | — | — |
pimple/pimple Version ~3.0 | — | — |
monolog/monolog Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.