The package is licensed, documented, tested, and has clean automated workflows. Its small audience and single publisher leave less evidence of broad maintenance capacity.
65%
Total Score
67
89
75
One registry publisher is consistent with an individually owned project, but it also indicates a thin publishing base when combined with no recent commit activity.
The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance despite the recent release history.
Four stars, no forks, and one watcher indicate a very small user and contributor footprint. Popularity is only supporting evidence, but this leaves limited external validation.
The repository has no published security policy, which is a transparency gap for reporting and handling vulnerabilities.
The assessed release is explicitly a beta, which adds compatibility risk for consumers even though prereleases are only a minority of recent releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^6.4 || ^7.0 | — | — |
symfony/filesystem Version ^6.4 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.