Package Health

nicwortel/symfony-skeleton

The repository has basic build and test scaffolding, but its documentation is still a template and it has no security policy. Install scripts and unpinned workflow actions add maintenance and supply-chain hygiene concerns.

Latest v1.3.0PackagistPackagist

35%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

58

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The latest release was in August 2020, with no releases in the preceding 12 months of collection and only seven releases overall. This is strong evidence that the package is no longer actively maintained.

Repo commit activitydanger

There were zero commits and zero active maintainers in the measured three-month period. Combined with the old release history, this indicates sharply reduced maintenance capacity.

Licensecaution

The manifest declares the package proprietary, with no recognized license and no license file in the package or repository. That leaves consumers without clear open-source reuse terms.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, increasing the amount of package code executed during dependency operations. No provided signal shows those scripts are unsafe, so this is a hygiene concern rather than a severe finding.

Package scaffoldingcaution

A README is present and the repository reports tests, but the README remains a generic project template and provides limited consumer guidance. The absence of tests or a changelog in the published artifact is normal packaging practice.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
symfony/yaml
Version 5.1.*
—
—
symfony/dotenv
Version 5.1.*
—
—
symfony/console
Version 5.1.*
—
—
symfony/twig-bundle
Version 5.1.*
—
—
symfony/monolog-bundle
Version ^3.5
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform