The package includes a clear MIT license, consumer documentation, repository tests, and release notes. Its main weakness is that the only release is about five months old and the repository shows no commits or active maintainers in the last three months.
68%
Total Score
75
100
78
75
This is the sole release, published about five months ago, so there is not yet evidence of an established release cadence or sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, leaving current maintenance responsiveness unproven.
There are no open issues or pull requests, but there is also no recent issue or pull-request activity to demonstrate ongoing support.
The repository has six stars and one fork, showing limited adoption. Popularity is only supporting evidence, and the organization backing, tests, and clear package identity partly compensate for the small audience.
The repository uses Composer and Make tooling, but no security-scanning tool was detected. This is a modest transparency gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^7.4|^8.0 | — | — |
symfony/stopwatch Version ^7.4|^8.0 | — | — |
symfony/http-kernel Version ^7.4|^8.0 | — | — |
symfony/dependency-injection Version ^7.4|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.