This is a mature, established Symfony bundle with more than 13 years of release history, 180 releases, a stable current version, an active non-archived organization-owned repository, a matching README reference, and a clear MIT license. The main concern is maintenance momentum: the repository records zero commits and zero active maintainers in the last three months despite a recent release, while repository popularity is modest and there is no security policy or security-scanning tooling. The package is usable, but dependency adopters should verify ongoing compatibility and support before treating it as a long-term strategic dependency.
72%
Total Score
75
100
83
90
The artifact includes a README, while packaged tests and a changelog are absent; however, repository tests are present, which compensates for the missing packaged tests. The missing changelog is a modest transparency gap.
The repository recorded zero commits and zero active maintainers over the last three months. This is the strongest concern because it suggests maintenance momentum has currently collapsed, despite the recent release history.
There were no new or merged pull requests and no issue activity in the last month; the null open-issue count limits interpretation, but the absence of recent collaboration is a maintenance caution.
The repository has modest adoption indicators with 14 stars, 4 forks, and 16 watchers. This is supporting evidence of a small project, not a severe concern, but it provides limited external validation.
Composer and Phing build tooling are present, but no security-scanning tools are configured. Build support is positive while the missing security tooling is a transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.13 | — | — |
doctrine/dbal Version ^3.8 | — | — |
symfony/config Version ^6.4|^7.2 | — | — |
symfony/routing Version ^6.4|^7.2 | — | — |
symfony/http-kernel Version ^6.4|^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.