The package has tests, a small runtime dependency set, and no install-time scripts. It lacks a license and security policy, while the repository-to-package naming mismatch adds uncertainty.
30%
Total Score
0
100
67
75
The latest release was in September 2016, with no releases in the last 12 months. Nearly 10 years without a release indicates severe abandonment risk.
The repository has had zero commits and zero active maintainers in the last 3 months, consistent with the nearly 10-year release gap.
No declared license or license file was found, leaving the legal terms for using this dependency unclear.
The repository name does not match the package name, and no README package mention was available. This creates uncertainty about whether the linked repository is the package's actual source.
The repository has no security policy, reducing transparency about how vulnerabilities would be reported or handled.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version 2.7.* | — | — |
symfony/validator Version 2.7.* | — | — |
symfony/framework-bundle Version ~2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.