The package is documented, tested, licensed, and has no install-time scripts. Its only release was about six months ago, with no commits in the last three months; workflow actions are also unpinned. Pin v1.0.0 and expect limited maintenance visibility.
58%
Total Score
50
83
75
This is the package's only release, published about six months ago, so there is not enough release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. For a package only about six months old, this leaves ongoing maintenance uncertain.
Composer is used for the build, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.
The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both action references are unpinned. Unpinned actions reduce build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^3 | — | — |
doctrine/dbal Version ^4 | — | — |
symfony/cache Version ^7 | — | — |
symfony/filesystem Version ^8.0 | — | — |
symfony/var-exporter Version ^7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.