Usable with caveats: this is a mature, licensed, organization-backed package with a recent stable release, tests, and release notes. Recent repository activity is quiet, and the repository does not explicitly mention the package name, so verify the source relationship before adopting it.
72%
Total Score
67
100
88
67
The repository recorded zero commits and zero active maintainers in the three months before collection, indicating currently quiet development despite the recent release.
There were no new or closed issues or pull requests in the last month, while 51 issues and 10 pull requests remain open; this suggests limited recent issue handling.
The linked repository neither matches the package name exactly nor mentions it in its README, creating uncertainty about whether it directly backs this package; organization ownership partly helps but does not resolve that gap.
The repository uses Composer build tooling, but no security-scanning tool was detected, leaving a modest transparency and supply-chain hygiene gap.
No repository security policy was found, reducing clarity about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^5.4|^6.4|^7.3|^8.0 | — | — |
symfony/serializer Version ^5.4|^6.4|^7.3|^8.0 | — | — |
symfony/framework-bundle Version ^5.4|^6.4|^7.3|^8.0 | — | — |
symfony/deprecation-contracts Version ^2.1|^3.0 | — | — |
willdurand/jsonp-callback-validator Version ~1.1|^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.