The package is licensed, has extensive tests, and avoids install-time scripts. Its workflow has no detected dangerous findings, but dependency references are unpinned and no security policy is present.
40%
Total Score
0
75
67
The latest release was published in August 2021, with no releases in the last 12 months. More than five years without a new release is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating no observed ongoing maintenance.
The repository has 0 stars, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these values provide no adoption signal to offset the maintenance concerns.
The linked repository has no security policy. This is a transparency and response-process gap, although it does not by itself show that the package is unsafe.
The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but all 3 action references are unpinned. That weakens build reproducibility without indicating a severe workflow risk on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony-cmf/routing Version ^2.3.0 | — | — |
symfony/framework-bundle Version ^4.4 || ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.