This is a young but actively maintained Symfony package with 13 stable releases over 55 days, recent repository activity, and two contributors sharing commit activity evenly. It is not deprecated or archived, has a clear MIT declaration, no install-time lifecycle scripts, and the linked repository references the package. However, the repository and artifact contain no tests or changelog, the project has no security policy or security-scanning tooling, and the repository has no adoption history, so transparency and maturity remain limited. It appears usable for dependency adoption, but should be monitored as the project matures.
72%
Total Score
75
50
78
90
The package declares six runtime dependencies, including the SDK core and expected Symfony components, with no development dependencies; the dependency set is understandable, though the absence of dev dependencies provides no testing support.
A substantial README documents installation and configuration, but both the artifact and repository lack tests and a changelog; no provided signal compensates for those maturity gaps.
The linked repository is owned by an individual user rather than an organization, so the small maintainer base cannot be treated as organization-backed redundancy.
The package is only 55 days old but has 13 releases, including releases within the last 12 months and a very short median interval of about 6 hours; this shows active iteration but leaves limited long-term stability evidence.
There are no open issues or pull requests and no recent issue or pull-request activity. With no reported backlog this is not inherently unhealthy, but it provides little evidence of user engagement or maintenance responsiveness.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
bugban/php-sdk Version ^1.7.1 | — | — |
symfony/config Version >=3.4 | — | — |
symfony/http-kernel Version >=3.4 | — | — |
symfony/event-dispatcher Version >=3.4 | — | — |
symfony/dependency-injection Version >=3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.