Yet another contact bundle
10%
Total Score
critical
Unfit to use: the package is deprecated, its repository is archived, and releases stopped nearly 10 years ago.
Packagist marks the entire package as abandoned, with no replacement listed. This is a direct warning against taking a new dependency on it.
The latest release was published in December 2016, with no releases in the last 12 months. Nearly 10 years without a release is strong evidence of abandonment for a framework bundle.
There were no commits and no active maintainers in the last 3 months. This confirms that the project is not receiving current maintenance.
The linked repository is archived and was last pushed in December 2017, nearly 9 years before collection. Archived source leaves little expectation of fixes or compatibility updates.
The repository has no security policy. That is a transparency and maintenance gap, especially for a package handling contact-form messages, although the stronger abandonment signals already determine the outcome.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/translation Version ^2.7|^3.0 | — | — |
symfony/twig-bundle Version ^2.7|^3.0 | — | — |
symfony/framework-bundle Version ^2.7|^3.0 | — | — |
symfony/swiftmailer-bundle Version ^2.3 | — | — |
sensio/framework-extra-bundle Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.