The package includes a clear README, tests, and a focused runtime dependency set. Its repository is actively maintained by an organization, though workflow pinning and a missing security policy leave modest hygiene gaps.
84%
Total Score
100
100
94
67
The project uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency gap rather than evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a documentation gap, not evidence that the package is unsafe.
The single workflow was fully analyzed and had no reported audit findings or untrusted checkout paths, but its one action use is unpinned. The pull_request_target trigger is ordinary here because no dangerous sink was detected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^7.0 || ^8.0 | — | — |
symfony/console Version ^7.0 || ^8.0 | — | — |
symfony/http-kernel Version ^7.0 || ^8.0 | — | — |
jane-php/json-schema Version ^8.0 | — | — |
symfony/dependency-injection Version ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.