Usable with caveats: the package is licensed, clearly packaged, stable, and had two releases in the last year. Recent commit activity is absent, and the project has very little community visibility plus no security policy, so maintenance could become less dependable.
68%
Total Score
50
100
89
90
One registry publishing account supports a narrow bus factor, although the package is backed by the same individual repository owner and recent releases show ongoing publishing.
The package and repository are consistently associated with the individual owner Vladimir Chebotarev. Individual ownership is not inherently unhealthy, but it provides less organizational continuity than a backed project.
The repository recorded zero commits and zero active maintainers in the last three months. Although the assessed release was published in January 2026, the current lack of development activity raises maintenance risk.
The repository has only one star, fork, and watcher, indicating very limited independent adoption or review. Popularity is supporting evidence rather than a decisive health verdict, so this is a caution rather than a danger.
Composer is used for builds, but no security-scanning tooling is present. The small repository and absence of workflows reduce automation exposure, but they do not compensate for the missing security checks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/validator Version ^5.4 || ^6.4 || ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.