Its compact scope and organization backing reduce the risk of a thin project. The long release gap, inactive recent commits, and license mismatch leave maintenance and reuse concerns to resolve before adoption.
62%
Total Score
75
100
78
75
A license file is present, but the manifest declares LGPL-3.0-or-later while the artifact license file was detected as GPL-3.0. That mismatch creates a real licensing clarification concern.
The package has five releases since June 2022, but none in the last 12 months; its latest release was about 18 months ago. This indicates a slow or paused release cadence, though the package may be intentionally stable.
There were no commits and no active maintainers in the last three months. Because the latest release was about 18 months ago, this supports concern that maintenance has slowed or stopped.
The repository has two stars, two watchers, and no forks, indicating a very small user and contributor footprint. Popularity is supporting evidence rather than a verdict, but it offers little evidence of broad community resilience.
Composer build tooling is present, but no security scanning tools were detected. For a small PHP bundle this is a modest transparency and maintenance gap, not a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/mime Version ^5.4 || ^6.4 || ^7.1 | — | — |
symfony/mailer Version ^5.4 || ^6.4 || ^7.1 | — | — |
symfony/console Version ^5.4 || ^6.4 || ^7.1 | — | — |
symfony/http-kernel Version ^5.4 || ^6.4 || ^7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.