The single maintainer, missing license, and absent security policy add adoption risk. The repository is not archived and has a defined Composer dependency set, but that does not offset its age.
30%
Total Score
25
33
50
This package has only one release, published about 11 years ago, with no releases in the last 12 months. That strongly indicates abandonment for a dependency intended to receive maintenance.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and leaving no evidence of current maintenance.
No declared license or license file was found, leaving the legal terms for using and redistributing this package unclear.
Only one registry account has publish access. The individual repository ownership is consistent with this, but it still creates a thin publishing and maintenance base.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no community signal to offset the maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version 3.0.x-dev | — | — |
symfony/asset Version 3.0.x-dev | — | — |
symfony/debug Version 3.0.x-dev | — | — |
symfony/config Version 3.0.x-dev | — | — |
symfony/routing Version 3.0.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.