The stable release includes tests, a clear MIT license, and a matching source repository. Its maintenance evidence is very old, with no commits for nearly 10 years and no recent releases; the repository also does not clearly identify the package.
38%
Total Score
0
79
50
The latest release was published in November 2016, with no releases in the last 12 months. Nearly 10 years without a release is strong abandonment evidence for a framework bundle.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating no observed current maintenance.
The repository name does not match the package name, and no README package mention was available. That weakens confidence that the linked repository is clearly the package's maintained home.
The repository has no security policy. This is a transparency and maintenance gap, though it is less serious than the long absence of releases and commits.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ~2.2,>=2.2.3,<2.5 | — | — |
iibs/arnm-core Version 1.0.* | — | — |
imagine/imagine Version ~0.6.1 | — | — |
symfony/symfony Version 2.7.* | — | — |
liip/imagine-bundle Version ~1.0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.