Documentation and licensing are clear, and the source repository matches the package under organization ownership. Its small dependency footprint and lack of install scripts limit adoption risk, but ongoing maintenance should be confirmed before relying on it.
62%
Total Score
75
100
88
75
The package has five releases over roughly three years and none in the last 12 months; the latest release was over two years ago, which raises maintenance concerns.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and a meaningful abandonment risk.
Composer build tooling is present, but no security scanning tools are configured, leaving a modest verification gap.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities, although this is a hygiene gap rather than evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version >=7 <8 | — | — |
symfony/string Version >=7 <8 | — | — |
symfony/console Version >=7 <8 | — | — |
symfony/serializer Version >=7 <8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.