This is a well-scaffolded, licensed, non-deprecated Symfony package with a matching repository, current commit activity, tests, changelog, and organization ownership. The main concerns are its very short 36-day history, rapid release cadence, complete dependence on a single active contributor, lack of security scanning and a security policy, and zero repository popularity; these indicate limited maturity and operational depth rather than clear abandonment, especially since the repository is active and the package includes substantial documentation and tests.
78%
Total Score
75
50
88
90
The package declares 9 runtime dependencies, including Doctrine, Symfony, and related Letkode packages. This is a meaningful dependency surface that increases transitive maintenance exposure, but it is consistent with the bundle's described functionality.
The package is only 36 days old with 9 releases, and releases arrive about every 6 hours at the median. This shows active iteration but provides limited evidence of long-term maintenance and release stability.
All 7 recent commits came from one contributor, creating a low bus factor. Organization ownership provides some handoff capacity, but no second active contributor is evidenced by this signal.
The repository recorded 7 commits in the last 3 months with one active maintainer. Recent activity is healthy for a new package, though the narrow contributor base limits maintenance resilience.
The project uses Make and Composer, demonstrating basic build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^7.0 || ^8.0 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/validator Version ^7.0 || ^8.0 | — | — |
symfony/serializer Version ^7.0 || ^8.0 | — | — |
letkode/common-bundle Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.