crifosu/symfony4

Its 21 runtime dependencies and install-time scripts add upkeep and deployment complexity, while no security policy limits transparency. The MIT declaration and matching repository identity are positive, but do not offset the package’s limited project evidence.

Latest v1.0.0

Packagist

32%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published more than eight years ago, with no releases in the last 12 months. That is strong evidence of an inactive dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, consistent with a project that has not been maintained for years.

Dependency profile

The package declares 21 runtime dependencies, including multiple Symfony bundles and packs. That broad dependency surface increases compatibility and upkeep burden for an unreleased package.

Lifecycle scripts

The package runs post-install and post-update Composer scripts, which add installation-time behavior and maintenance risk compared with a package without lifecycle hooks.

Package file tree

The package contains only README.md and composer.json, leaving very little published material to inspect or consume. That sparse structure may be intentional for a skeleton, but it limits transparency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Krzysztof Kromolicki

Direct Dependencies

Dependency	Last Release	Score
symfony/lts Version ^4@dev	—	—
symfony/flex Version ^1.0	—	—
symfony/form Version ^4.0	—	—
symfony/yaml Version ^4.0	—	—
symfony/asset Version ^4.0	—	—