Usable with caveats: this is a very new package with six releases in one day and no tests or security scanning. The repository is present, active as of the latest check, and the package structure is coherent, but there is not yet enough history to demonstrate long-term maintenance.
68%
Total Score
83
100
78
90
The artifact includes a README, but it has no tests or changelog, and the repository also has no tests or changelog. For a code-generating Composer tool, the lack of testing evidence is a real maintenance and regression concern.
The package is only 1 day old, despite having 6 releases and a latest release within minutes of collection. This shows active initial iteration but provides no evidence of sustained maintenance yet.
The repository reports 0 commits and 0 active maintainers over the last 3 months, but the package itself is only 1 day old and was pushed very recently. This is a coverage limitation for long-term maintenance, not a strong abandonment finding.
The repository has 0 stars, forks, and watchers. For a package that is only 1 day old this is unsurprising, but it offers no supporting evidence of community adoption.
Composer is used as a build tool, giving the project basic ecosystem-appropriate tooling, but no security scanning tools are configured. The missing scanning is a transparency gap for a package that downloads or generates client code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.0 || ^7.0 | — | — |
symfony/console Version ^6.0 || ^7.0 | — | — |
symfony/process Version ^6.0 || ^7.0 | — | — |
symfony/filesystem Version ^6.0 || ^7.0 | — | — |
symfony/http-client Version ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.