63%
Total Score
50
100
89
75
Only one registry account can publish the package, leaving a thin release-control base. The linked repository is user-owned rather than organization-backed, so there is no shown organizational cushion.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of ongoing source maintenance despite recent registry releases.
The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of broad community review or backup adoption.
Composer is used for builds, but no security scanning tools were detected, leaving automated security oversight limited.
The repository has no security policy, so its process for receiving and coordinating vulnerability reports is not documented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.0|^8.0 | — | — |
spatie/db-dumper Version ^3.8|^4.0 | — | — |
doctrine/collections Version ^2.2|^3.0 | — | — |
doctrine/persistence Version ~2.0|^3.0|^4.1 | — | — |
symfony/event-dispatcher Version ^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.