Healthy and usable, with some early-project caveats. It has active recent releases, comprehensive tests and documentation, and a matching maintained repository, but it is only 46 days old and all recent commits come from one contributor.
76%
Total Score
70
100
83
80
One registry maintainer is consistent with the matching user-owned repository, but it leaves limited publishing redundancy.
The package is very young at 46 days, but it has already shipped five releases, including five in the last 12 months, with a median interval of about 2.5 days. This shows active development while leaving limited evidence of long-term stability.
All eight recent commits came from one contributor, giving the project a high bus-factor risk; the repository is user-owned rather than organization-backed, so there is no provided compensating organizational context.
Eight commits were made in the last three months by one active maintainer, which demonstrates current work but provides little evidence of broader maintenance capacity.
The repository has zero stars and one fork, showing limited adoption; this is supporting evidence only and does not outweigh its active development and strong package structure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.28 | — | — |
symfony/http-kernel Version ^6.4|^7.4|^8.0|^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.