Clear documentation, tests, release notes, and security tooling support dependable use. Organization backing and a recent repository update help, but the latest three months of commits came from one contributor and the repository lacks a security policy.
78%
Total Score
75
100
100
75
One contributor made all commits in the last three months. Organization ownership provides some handoff capacity, but recent activity is still concentrated.
Only two commits were made in the last three months, indicating relatively light recent development, although the recent repository push and release history provide some compensation.
The repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented.
The single workflow was fully analyzed with no audit findings or dangerous triggers, but all 7 action references are unpinned, making builds less reproducible and more exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^6.4 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.