Clear documentation, tests, licensing, and recent release activity support adoption. The repository has no commits in the last three months, lacks a security policy, and leaves two of three workflow actions unpinned.
72%
Total Score
50
100
100
67
One registry publishing maintainer creates a limited publishing base, but the linked repository and recent release history provide some compensating continuity.
The package is backed by a named individual repository owner rather than an organization, so the single-maintainer concern is not offset by organizational backing.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern despite the recent registry releases.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month; this offers limited evidence of active community response.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^5.4 || ^6.4 || ^7.4 | — | — |
symfony/validator Version ^5.4 || ^6.4 || ^7.4 | — | — |
symfony/translation Version ^5.4 || ^6.4 || ^7.4 | — | — |
symfony/event-dispatcher Version ^5.4 || ^6.4 || ^7.4 | — | — |
symfony/dependency-injection Version ^5.4 || ^6.4 || ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.