The project has a clear license, release notes, and organization backing, but its maintenance picture is weak. Security scanning is absent, and all three workflow actions are unpinned, adding avoidable build risk.
58%
Total Score
75
100
83
50
The package has 11 releases over roughly 12 years, but none in the last 12 months and the latest release was about two years ago, indicating slow or stopped maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the two-year release gap and raising abandonment risk.
There is one open issue and one open pull request, with no issues or pull requests closed in the last month; this provides no evidence of active recent support.
The repository has only 3 stars and 3 forks, indicating limited community adoption and a small external support signal, though popularity alone is not decisive.
Composer is used for the build, but no security scanning tools are present, leaving a meaningful project-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
knplabs/knp-gaufrette-bundle Version ~0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.