45%
Total Score
unhealthy
Risky: no release since 2022 and ongoing maintenance is unverified.
The latest release was in December 2022, with no releases in the last 12 months despite the package being over four years old. This is a substantial abandonment concern.
The package runs post-install and post-update scripts, which adds avoidable installation and update complexity for consumers. No compensating provenance or repository evidence was provided.
Only one registry publisher is listed, leaving little visible publishing capacity if that maintainer becomes inactive. Registry access does not prove actual activity, so this is a supporting concern rather than decisive evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/flex Version ^1.17|^2 | — | — |
symfony/yaml Version 5.4.* | — | — |
symfony/runtime Version 5.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.