The package includes tests, a working Composer and Make build setup, and no install-time scripts. Its MIT license and lack of registry deprecation reduce adoption friction, while the small repository footprint limits evidence of maturity.
41%
Total Score
0
50
69
83
Only two releases exist, with none in the last 12 months; the latest release was nearly three years ago, which is strong evidence of abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the nearly three-year release gap and increasing abandonment risk.
Six runtime dependencies, including Symfony and Doctrine components, create moderate integration and update surface but are reasonable for a framework bundle.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of community use or external review.
Composer and Make are used for the build, but no security-scanning tooling is present, leaving repository security hygiene less transparent.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.13 | — | — |
symfony/web-link Version ^5.4 || ^6.2 | — | — |
symfony/serializer-pack Version ^1.1 | — | — |
symfony/framework-bundle Version ^5.4 || ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.