The bundle includes a clear MIT license, tests, documentation, and organization-backed ownership. Its old Symfony-era dependency profile and lack of security scanning add maintenance concerns; pin it only if you have verified compatibility with your stack.
38%
Total Score
50
50
64
50
The latest release was on January 20, 2016, with no releases in the last 12 months despite 18 historical releases. This long gap is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since January 2016.
The bundle has four runtime dependencies, including Symfony framework components and the related client package. This is a manageable profile, but its older framework-era dependencies may constrain compatibility today.
Composer build tooling is present, showing basic project structure, but no security scanning tools were detected. The tooling evidence is therefore only partially reassuring.
The repository is not marked archived, which avoids a formal abandonment signal, but its last push was still on January 20, 2016. The unarchived status does not compensate for the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ~2.3|~3.0 | — | — |
symfony/framework-bundle Version ~2.3|~3.0 | — | — |
elastification/php-client Version >=0.9,<1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.