62%
Total Score
caution
Usable with caveats: one release and no commits for over a year point to stalled maintenance.
The package has made only one release, on June 9, 2025, with no releases in the last 12 months. That is meaningful evidence of limited ongoing maintenance, though a small stable package can remain usable after a single complete release.
The repository recorded zero commits and zero active maintainers during the last three months, despite being an active, non-archived project. This weakens confidence that defects or compatibility changes will be addressed promptly.
Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest process gap and is outweighed by the package's tests and simple dependency profile.
The repository has no security policy, which reduces transparency for reporting vulnerabilities and coordinating fixes. This is a hygiene concern, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/framework-bundle Version ^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.