65%
Total Score
50
100
83
90
There were zero commits and zero active maintainers in the last three months. This is the strongest concern because it suggests maintenance may have stalled, although the current registry release partially offsets it.
The package has existed for about 8 years with 162 releases, but only 2 releases in the last 12 months, indicating a slower recent cadence despite the new assessed release.
There are only 2 open issues, no open pull requests, and no issue or pull-request activity in the last month. The small backlog is positive, but the lack of recent activity is consistent with limited maintenance.
The repository has only 11 stars and 7 forks, indicating a small adoption and contributor footprint. Popularity is supporting evidence rather than a decisive health verdict, so this lowers confidence in long-term support modestly.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning coverage is a maintenance and transparency gap, though it is not by itself severe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^4.4|^5.4|^6.0|^7.0|^8.0 | — | — |
symfony/config Version ^4.4|^5.4|^6.0|^7.0|^8.0 | — | — |
symfony/console Version ^4.4|^5.4|^6.0|^7.0|^8.0 | — | — |
symfony/http-kernel Version ^4.4|^5.4|^6.0|^7.0|^8.0 | — | — |
symfony/event-dispatcher Version ^4.4|^5.4|^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.