The package is clearly documented and has a coherent source tree, but its maintenance has effectively stopped and its dependencies include unpinned development branches. The organization-backed repository is not archived or deprecated, yet the long inactivity makes this release a risky long-term dependency.
32%
Total Score
50
50
81
83
The latest release was published in July 2013, with no releases in the last 12 months; this is strong evidence of abandonment for a framework bundle.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's roughly 13-year release gap.
Six runtime dependencies are declared, including pagerfanta/pagerfanta and white-october/pagerfanta-bundle on dev-master in the package README, reducing reproducibility and increasing compatibility risk.
The repository has only 2 stars and 1 fork, providing little evidence of broad community review or adoption. Popularity is supporting evidence, so this reinforces but does not determine the score.
The linked repository has no security policy, which leaves vulnerability-reporting and response expectations undocumented; this is a secondary transparency gap beside the much larger maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version * | — | — |
pagerfanta/pagerfanta Version dev-master | — | — |
doctrine/doctrine-bundle Version * | — | — |
symfony/framework-bundle Version 2.2.* | — | — |
white-october/pagerfanta-bundle Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.