The package has a long release history, stable releases, organization backing, and no deprecation or install scripts. It also includes tests, release notes, a license, security documentation, and dependency scanning.
72%
Total Score
83
94
100
The repository recorded zero commits and zero active maintainers in the last three months. Recent release and push evidence partly offsets this, but the lack of observed commit activity remains a maintenance concern.
The repository name does not exactly match the package name and its README does not mention the package, creating some uncertainty about the linkage. The matching source tree and organization context provide partial compensation.
All 5 workflows were analyzed successfully with no high-confidence audit findings or unsafe triggers, but all 11 action references are unpinned, reducing build reproducibility and supply-chain integrity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2 || ^3 | — | — |
doctrine/orm Version ^2.14.0 || ^3.0 | — | — |
symfony/config Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/console Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/http-kernel Version ^6.4 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.