The package includes tests, a substantial README, release notes for version 1.2, and a matching source repository. Maintenance has stopped since August 2025, with no commits or releases in the following year, while all seven workflow actions are unpinned and no security policy is present.
58%
Total Score
38
50
83
75
There were zero commits and zero active maintainers in the last three months, consistent with the long pause since the last release. This is the strongest maintenance concern for adopting the package.
The runtime dependency set is substantial at 11 packages and is closely aligned with a Symfony bundle, but its size increases the surface area that must remain compatible over time.
One registry publishing account is present. Because the repository owner is an individual rather than an organization, this indicates a thin maintainer base and limited redundancy.
The registry namespace and repository owner match, and the owner is an individual. This supports package identity but offers less organizational continuity than organization-backed maintenance.
The package has only three releases, all within about three days, and none in the last 12 months despite being about 13 months old. This leaves limited evidence of sustained maintenance and lowers confidence in continued support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1|^2.0|^3.0 | — | — |
symfony/yaml Version ^5.4|^6.4|^7.1 | — | — |
symfony/cache Version ^5.4|^6.4|^7.1 | — | — |
symfony/config Version ^5.4|^6.4|^7.1 | — | — |
symfony/validator Version ^5.4|^6.4|^7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.