Usable with caveats: this release has clear licensing, tests, repository backing, and security tooling, but it has not been released since February 2018 and currently shows no commit or issue-resolution activity. The project also describes itself as alpha, so long-term compatibility and maintenance are concerns.
52%
Total Score
63
79
50
The package has five releases but none in the last 12 months, with the latest released on February 28, 2018. This long release gap materially raises abandonment and compatibility risk.
There were zero commits and zero active maintainers in the last three months, so the repository currently offers little evidence of ongoing maintenance. The recent push noted by repository_archived does not compensate for the absence of current commit activity.
There are 17 open issues and no issues or pull requests were closed or merged in the last month. This suggests unresolved maintenance demand, although one open pull request shows limited ongoing activity.
No repository security policy is present. This is a transparency gap, though it is less decisive than the release and maintenance inactivity.
The single workflow has no top-level token permissions declaration. No write permissions or dangerous workflow patterns were observed, so this is a modest workflow-hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ^3.3 | — | — |
symfony/asset Version ^3.3 | — | — |
symfony/finder Version ^3.3 | — | — |
league/commonmark Version ^0.17 | — | — |
symfony/validator Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.