A minimal Symfony project with a few extra packages to make a JSON API possible
28%
Total Score
0
50
50
The package is about 7 years old, has only 3 releases, and has had no releases in the last 12 months; its release activity appears to have stopped shortly after publication.
The repository recorded 0 commits and 0 active maintainers over the last 3 months, consistent with the package's long release gap and indicating substantial abandonment risk.
post-install-cmd and post-update-cmd scripts run during dependency operations, adding supply-chain and installation complexity to a package that otherwise contains very little visible content.
The published artifact and repository each contain only composer.json, leaving no implementation, documentation, or supporting project files visible for consumers to assess.
A GitHub release exists for this version with notes saying "Fixed focus on version 5," which is a small positive, but the package has no README and no tests or changelog.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/flex Version ^1.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.