Healthy and reasonable to adopt. It has regular releases, current two-person maintenance activity, strong repository and package documentation, tests, and no deprecation or archive warning. The missing security policy and incomplete workflow permission declarations are notable hygiene gaps.
87%
Total Score
100
100
100
80
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear. This is a transparency gap, though the repository does use Sonar scanning.
None of the three workflows declares top-level token permissions, and none is explicitly read-only; although no workflow requests top-level write access, the permission posture is less explicit than preferred.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1||^2.0||^3.0 | — | — |
symfony/lock Version ^7.4 | — | — |
symfony/yaml Version ^7.4 | — | — |
doctrine/dbal Version ^3.0||^4.0 | — | — |
symfony/config Version ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.