It includes a license, tests, a changelog, and a substantial application tree. Install and update hooks add operational complexity, while the repository could not be found for maintenance verification.
56%
Total Score
50
80
75
The package declares 12 runtime and 18 development dependencies, a sizeable but understandable profile for a full application skeleton; it increases maintenance surface without being severe by itself.
Composer post-install and post-update scripts run during dependency operations, adding operational and review complexity even though such hooks can be normal for an application skeleton.
The package has 36 releases since November 2017, but none in the last 12 months and the latest release was in November 2022, indicating a long maintenance gap.
Version 0.28 is not marked prerelease, which is positive, but the pre-1.0 versioning signals less maturity than a stable major release.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ~2.5 | — | — |
symfony/flex Version ^1.3.1 | — | — |
leafo/scssphp Version ^0.7.4 | — | — |
symfony/dotenv Version ^5.4 | — | — |
symfony/apache-pack Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.