mazarini/entity
Tests, a README, and a matching source repository provide useful maintenance evidence. The single release is nearly three years old, every workflow action is unpinned, and the declared GPL license conflicts with the detected LGPL file.
45%
Total Score
79
50
Health Score Breakdown
The package declares GPL-3.0-or-later and includes a license file, but the detected license is LGPL-3.0. The mismatch should be resolved before depending on it.
This is the package's only release, published nearly three years ago, with no releases in the last 12 months. That leaves substantial abandonment risk despite the repository remaining available.
The repository uses Composer and Make, showing a defined build process. It has no security-scanning tooling, a modest transparency gap for a dependency project.
All three workflows use read-only permissions and the audit found no injection or high-severity findings, but all 9 action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mazarini |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ^2.17 | — | — |
symfony/flex Version ^2.4 | — | — |
symfony/console Version ^6.3|^7.0 | — | — |
symfony/runtime Version ^6.3|^7.0 | — | — |
symfony/validator Version ^6.3|^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.