This release appears usable and actively maintained, with 32 releases over 278 days, the latest published very recently, substantial repository activity, tests, changelog, documentation, licensing, build tooling, and security scanning. The main risks are that maintenance is concentrated entirely in one contributor, the project is still relatively young and has a small user base, and the repository lacks a security policy while one workflow does not declare top-level token permissions. These concerns warrant monitoring and perhaps additional dependency review, but there is no evidence here of deprecation, archival, unsafe workflow patterns, or missing project artifacts that would make the package unfit to depend on.
78%
Total Score
63
50
89
80
The package declares 18 runtime dependencies spanning Symfony, Doctrine, and related bundles; this is a meaningful integration surface and adds upgrade and compatibility overhead, but the profile is coherent with the bundle's described functionality.
The repository is owned by the individual user kachnitel, not an organization, so the single-maintainer and bus-factor concerns are not compensated by visible organizational ownership.
All 75 commits in the last 3 months came from one contributor, giving the project a high single-maintainer continuity risk; the repository owner is an individual rather than an organization, so there is no organizational backing to offset this concentration.
There are 5 open issues, one new issue in the last month, and one merged pull request, showing some project interaction but limited evidence of broad community participation.
The repository has only 5 stars, no forks, and no watchers, so external adoption and independent validation are limited; this is a supporting concern rather than a health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.15 | — | — |
doctrine/orm Version ^3.5 | — | — |
symfony/form Version ^7.4|^8.0 | — | — |
symfony/validator Version ^7.4|^8.0 | — | — |
symfony/serializer Version ^7.4|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.