Usable with caveats: it has a long, frequent release history and an active, non-archived source repository, but recent repository activity is absent and the project has no tests, changelog, or security policy.
68%
Total Score
50
50
83
90
The package declares 13 runtime dependencies, including Symfony, Doctrine, Redis, and related bundles. This is a substantial integration surface and creates compatibility and transitive-maintenance exposure, though it is consistent with the bundle's stated functionality.
Only one registry account, Experteam, has publishing access. That is a thin publishing base, although the linked repository and namespace show consistent project ownership, which partly offsets the concern.
The artifact and repository include a README but neither contains tests or a changelog. For a framework bundle, the missing tests reduce confidence in regression coverage, while the missing changelog limits release transparency.
The package namespace and repository owner are consistent with Experteam, but the repository owner is classified as an individual user rather than an organization. This gives some ownership continuity without demonstrating a broad institutional maintainer base.
The repository recorded zero commits and zero active maintainers in the last three months, despite a release being published during the collection period. The frequent release history is compensating evidence, but the lack of recent source activity remains a maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^3.3 | — | — |
doctrine/dbal Version ^3 | — | — |
snc/redis-bundle Version ^4.8 | — | — |
symfony/messenger Version 6.4.* | — | — |
symfony/serializer Version 6.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.