The MIT license, matching repository, usable README, and absence of install scripts provide good transparency. Its Symfony dependencies and small project footprint offer limited evidence of ongoing support, so pinning this release carries maintenance risk.
44%
Total Score
25
50
67
75
The latest release was published more than four years ago, and there have been no releases in the last 12 months. Eleven releases over the package's lifetime show some earlier activity, but the current gap materially raises abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with the release history's prolonged inactivity. This is strong evidence that ongoing support capacity is currently weak.
Six runtime dependencies, including Symfony and Twig components, create a meaningful dependency surface for a small bundle. The profile is coherent with the package's stated framework role, but the absence of development dependencies gives little evidence of a maintained test or development setup.
The repository is owned by a user account rather than an organization, and the registry namespace does not provide evidence of organizational backing. That leaves a relatively thin visible support structure for a package with no recent activity.
The repository has only 3 stars, 0 forks, and 1 watcher. Popularity is not required for a healthy small package, but these low numbers provide little supporting evidence of community scrutiny or adoption.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.3 | — | — |
symfony/config Version ^5.2 | — | — |
symfony/orm-pack Version ^2.1 | — | — |
twig/extra-bundle Version ^3.3 | — | — |
symfony/twig-bundle Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.