The package includes tests, a changelog, a license, and a repository that clearly matches its published name. Organization backing and recent repository activity provide continuity, but the current release cadence, absent recent commits, and unpinned workflow actions reduce confidence for a long-term dependency.
58%
Total Score
83
81
83
The package is about four years old with 23 releases, but only one release appeared in the last 12 months; that slowdown is a maintenance concern despite its earlier roughly monthly cadence.
No commits or active maintainers were recorded in the last three months. This conflicts with the recent push and merged pull requests, but still lowers confidence in sustained development activity.
Composer build tooling is present, but no security-scanning tool was detected, leaving a meaningful repository hygiene gap for a dependency package.
The repository has no security policy, making vulnerability reporting and disclosure expectations less transparent for downstream users.
The release is not marked prerelease, but the package remains below 1.0, so its API and long-term maturity are less established than a stable-major package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^6.4 || ^7.4 | — | — |
symfony/serializer Version ^6.4 || ^7.4 | — | — |
symfony/http-kernel Version ^6.4 || ^7.4 | — | — |
api-platform/openapi Version ^4.1 | — | — |
api-platform/metadata Version ^4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.