Healthy and actively maintained, with solid repository and release hygiene. The main caveats are its very young 40-day history, unusually concentrated contribution, and broad runtime dependency set.
78%
Total Score
80
50
89
90
The package declares 36 runtime dependencies, including framework, database, mail, security, and media components. That breadth increases integration and maintenance surface, though it matches the package's broad bundle scope.
The package is only 40 days old but already has 102 releases, with a median interval of about 2 hours 22 minutes. This demonstrates active publishing but leaves limited evidence of long-term stability.
One contributor made about 92% of the 269 recent commits, creating concentration risk. The second contributor remains active and organization backing provides some handoff capacity, so this is a caution rather than a severe abandonment signal.
There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month. This offers limited evidence about community responsiveness.
The repository has only 1 star and no forks or watchers, so there is little independent adoption evidence. Low popularity is supporting caution rather than a decisive health problem for a young package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
twig/twig Version ^3.21 | — | — |
doctrine/orm Version ^3.7 | — | — |
symfony/form Version ^8.0 | — | — |
symfony/intl Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.