Usable with caveats: the package is actively released and recently maintained, but it has no license, tests, README, or changelog, and all recent commits come from one person. Confirm licensing and accept the limited transparency before adopting it.
62%
Total Score
67
100
72
75
No declared license or license file was found in either the artifact or repository, leaving the legal terms for use unclear.
The complete 11-file tree is small and focused on Symfony voter helpers, so the limited structure is plausible for a narrowly scoped library; it does not, however, provide test or documentation files.
Neither the artifact nor repository contains a README, tests, or changelog. GitHub Releases are used, which provides some release visibility but does not cover the missing documentation and test evidence.
The repository is owned by an individual user rather than an organization, so the single-maintainer and bus-factor concerns are not offset by visible organizational backing.
One contributor made 100% of the 8 recent commits, creating a meaningful continuity risk with no demonstrated second maintainer.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/string Version ^6.4 || ^7.0 | — | — |
symfony/security-core Version ^6.4 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.