Clear documentation, release notes, licensing, and a matching repository support adoption. The project is young, has little visible community activity, and lacks a security policy.
66%
Total Score
67
100
78
50
post-install-cmd and post-update-cmd scripts run during Composer operations, increasing installation complexity and the code executed during dependency changes.
The package and repository are both owned by the same individual account. This confirms the source relationship but provides no organizational handoff beyond the single maintainer.
The package is only 94 days old with four releases, all clustered around its initial publication. This shows early activity but not a long maintenance record.
All 25 recent commits came from one contributor, leaving maintenance dependent on a single individual and creating a meaningful continuity risk.
The repository has three stars, no forks, and no watchers. Low adoption is supporting caution about maturity, though popularity alone does not determine health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^7.4|^8.0 | — | — |
symfony/process Version ^7.4|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.