Unfit to use despite the healthy Symfony source repository: Packagist marks this package abandoned, and the linked repository neither matches the package name nor mentions it. Use the official Symfony package instead.
18%
Total Score
88
75
100
The registry marks the entire package as abandoned, with replacement package set to “abandon”; this is a severe adoption and maintenance warning even though the linked repository is active.
The linked repository is symfony/symfony, but its name does not match linhecheng/cmlphp and its README does not mention this package. That leaves the release's source relationship and provenance unclear.
The repository is owned by the Symfony organization, which provides strong backing for the source project, but the registry namespace is linhecheng and therefore does not establish that this package is an official Symfony release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1|^2|^3 | — | — |
psr/link Version ^1.1|^2.0 | — | — |
psr/cache Version ^2.0|^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
twig/twig Version ^3.25|^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.