Its four runtime dependencies are modest, and the artifact includes a long readme and changelog. The repository could not be found, while one maintainer and an install-time script limit confidence.
44%
Total Score
50
50
50
The manifest declares a proprietary license, while an ISC license was detected in the artifact; this mismatch creates a real licensing concern despite license files being present.
The package runs a post-create-project-cmd script during installation, adding execution complexity and some supply-chain exposure beyond ordinary dependency resolution.
Only one registry account has publishing access, creating a thin operational base and increasing continuity risk.
The latest release was over a year ago, with no releases in the last 12 months, which weakens evidence of active maintenance for a young package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/finder Version ^5.2 | — | — |
symfony/console Version ^6.2 | — | — |
symfony/filesystem Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.