The repository has had no commits in the last three months, and the package has had no release in over a year. Its README, tests in the repository, matching source project, MIT license, and documented release notes provide useful transparency.
58%
Total Score
67
100
83
75
The package is backed by an individual repository owner rather than an organization, so the small maintainer base offers limited visible redundancy.
The package has published 7 releases since June 2023, but none in the last 12 months and the latest release was over a year ago, indicating slowed maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance activity has stalled.
The repository has only 2 stars and no forks, showing a very small adoption footprint. Popularity is supporting evidence rather than a decisive health verdict, but it provides little reassurance about project maturity.
Composer build tooling is present, but no security-scanning tools are configured. The missing scanner is a hygiene gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^7.2 | — | — |
symfony/type-info Version ^7.2 | — | — |
symfony/validator Version ^7.2 | — | — |
symfony/serializer Version ^7.2 | — | — |
symfony/http-kernel Version ^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.