Usable with caveats: the package is licensed, documented, linked to a matching repository, and has repository tests and release notes. However, it has only two releases, no commits in the past three months, and one registry maintainer, so ongoing maintenance capacity is uncertain.
64%
Total Score
50
100
89
90
Only one registry account has publish access, leaving little publishing redundancy. The matching user-owned repository provides some backing, but the contributor or publisher base remains thin.
The registry namespace and repository owner match, and the project is user-owned rather than organization-backed. This supports identity consistency but offers limited institutional maintenance redundancy.
The package is relatively young and has only two releases over roughly nine months, with about 83 days between releases. That is limited evidence of sustained release maintenance.
The repository recorded zero commits and zero active maintainers in the past three months. With only two releases overall, this materially increases uncertainty about ongoing maintenance.
There are no open issues or pull requests and no recent issue or pull-request activity. This provides no evidence of an active feedback or maintenance loop, though it may also reflect the project's small size.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.