Clear licensing, tests, release notes, and organizational ownership provide useful maintenance context. The large 54-package runtime dependency set and eight unpinned workflow actions add adoption and update risk.
20%
Total Score
50
50
79
75
The repository recorded 0 commits and 0 active maintainers in the last three months, reinforcing the risk that this release is no longer actively maintained.
The linked repository is archived, which is a severe abandonment risk for a CMS distribution that requires ongoing maintenance and security fixes.
The release declares 54 runtime dependencies, creating a broad update and compatibility surface for an already inactive package.
The package has 269 historical releases, but none in the last 12 months and its latest registry release was on November 3, 2023. Its long prior cadence does not offset the current release stoppage.
There were no new or closed issues or pull requests in the last month, while 19 pull requests remain open; this is consistent with stalled project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/flex Version ^1.7 | — | — |
symfony/form Version ^5.0 | — | — |
symfony/yaml Version ^5.0 | — | — |
symfony/asset Version ^5.0 | — | — |
symfony/cache Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.