Repository tests, dependency scanning, and a matching organization-owned source provide useful support. The workflow leaves its only action unpinned, while sustained maintenance and a security policy are not yet demonstrated.
67%
Total Score
75
94
67
The package is only 1 day old and has already published 9 releases, with a median interval of about 12 minutes. This shows active initial publishing but provides little evidence of sustained maintenance.
There are no commits or active maintainers recorded in the last 3 months. The repository is only 1 day old, which explains much of the gap but does not yet demonstrate durable maintenance.
No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.
The sole workflow was fully analyzed with no high-confidence audit findings or dangerous triggers, but its only action use is unpinned, reducing reproducibility and update integrity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.4 || ^8.0 | — | — |
symfony/config Version ^7.4 || ^8.0 | — | — |
symfony/mailer Version ^7.4 || ^8.0 | — | — |
monolog/monolog Version ^3.0 | — | — |
symfony/messenger Version ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.