Clear licensing, tests, release notes, and a complete source tree make the package transparent to integrate. Its modest popularity and lack of security scanning add limited concern, while adoption should account for the old release line and inactive recent development.
58%
Total Score
50
100
79
75
The package has 22 releases since April 2014, but none in the last 12 months and its latest registry release was in June 2021, indicating substantially slowed maintenance.
There were no commits and no active maintainers in the past three months, a meaningful maintenance warning for a library dependency.
The repository has 20 open issues and 9 open pull requests, with no issues or pull requests closed in the past month, suggesting unresolved maintenance backlog.
The project uses Make and Composer, but no security scanning tools were detected, leaving a modest repository-hygiene gap.
No repository security policy was found, reducing transparency for vulnerability reporting, though this is not by itself evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 | — | — |
doctrine/orm Version ^2.6.3|^2.7 | — | — |
symfony/form Version ^3.4 || ^4.3 || ^5.0 | — | — |
symfony/framework-bundle Version ^3.4 || ^4.3 || ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.