This is a healthy, established package with over five years of release history, a stable 1.5.3 release, four releases in the last 12 months, a non-deprecated registry status, and a recently updated non-archived repository. The repository is organization-owned, matches the package, includes tests and build/security tooling, and has no install-time lifecycle scripts or dangerous workflow patterns. The main concerns are that recent activity is concentrated in one contributor, the repository has no security policy, and the workflow does not declare top-level token permissions; these are meaningful hygiene and continuity gaps but do not outweigh the demonstrated maintenance and project backing.
82%
Total Score
70
100
94
80
Only one registry account has publish access, which is a continuity concern; however, the linked repository is organization-owned and recent repository activity confirms active ownership, partly compensating for the narrow registry publishing base.
All recent commits come from one contributor, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, but no second active contributor is shown.
There was 1 commit by 1 active maintainer in the last 3 months, demonstrating recent activity but at a low cadence and with limited redundancy.
The repository has 0 stars, 1 fork, and 1 watcher, indicating limited community adoption. Popularity is supporting evidence rather than a decisive health measure, so this is only a mild concern for external validation.
No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^6.4.45|^7.4.18|^8.1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.