It lacks a README, making integration and expected usage harder to assess. The MIT declaration and Composer build metadata are positives, but no security policy or scanning reduces transparency.
38%
Total Score
0
50
50
50
This is the sole release, published in August 2018, with no releases in the following eight years. That strongly indicates abandonment risk for a framework integration package.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with its last push in August 2018. This leaves compatibility and defect fixes unsupported.
The package declares eight runtime dependencies, creating a relatively broad compatibility surface for a release that has not been updated since 2018. The dependency count alone is not severe, but it increases the cost of relying on an unmaintained bundle.
The package has no README, which is a meaningful documentation gap for a Symfony bundle consumers must configure and integrate. Missing tests and a changelog are normal for a published artifact, while the GitHub release provides some release documentation evidence.
Composer is used for the build, which supports reproducible package management, but no security scanning tool was detected. The missing scanning is a modest repository hygiene concern rather than evidence of a malicious package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ~3.8 | — | — |
symfony/templating Version ~3.0 || ~4.0 | — | — |
symfony/translation Version ~3.0 || ~4.0 | — | — |
symfony/twig-bundle Version ~3.0 || ~4.0 | — | — |
symfony/framework-bundle Version ~3.0 || ~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.