Clear documentation, tests, and a release note make integration easier. The workflow has one unpinned action and no security policy, while all recent commits come from one contributor.
64%
Total Score
67
100
75
75
The repository is owned by an individual user rather than an organization, so the single-contributor maintenance concentration is not visibly buffered by organizational backing.
The package is only 68 days old, with four releases and a median interval of about 14 hours, showing active initial development but limited long-term history.
All 24 recent commits came from one contributor, leaving maintenance highly dependent on a single person.
The repository has zero stars, forks, and watchers, providing little community validation; the package's young age partly explains this limited visibility.
Composer is used for builds, but no security scanning tools were detected, leaving automated security coverage limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^8.1 | — | — |
symfony/process Version ^8.1 | — | — |
symfony/filesystem Version ^8.1 | — | — |
symfony/http-client Version ^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.