Clear documentation, tests, release notes, and security tooling make the project easier to evaluate and maintain. Its brief release history leaves limited evidence of long-term durability, so pinning this version is prudent.
67%
Total Score
50
50
94
83
The starter declares 37 runtime dependencies, including substantial Symfony, database, messaging, and infrastructure components; that breadth increases update and compatibility burden, though it fits the package's full application-starter role.
The repository is owned by an individual user rather than an organization, so the single-maintainer concentration represents a genuine continuity risk.
Six releases arrived over roughly one day, showing active initial publication but not yet enough history to demonstrate durable maintenance over time.
One contributor accounts for all recent commits, so maintenance depends entirely on a single person with no demonstrated handoff capacity.
Only three commits from one active maintainer were recorded in the last three months, which shows recent activity but a thin maintenance base.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
k2gl/enum Version ^2.1 | — | — |
symfony/uid Version ^8.0 | — | — |
doctrine/orm Version ^3.3 | — | — |
k2gl/app-env Version ^1.0 | — | — |
doctrine/dbal Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.