Symfony Bundle implementing the Inertia.js v3 server-side protocol
70%
Total Score
caution
Recent releases and an active repository are offset by one contributor and only one commit in the past three months.
Only one registry account has publish access. The linked repository is user-owned rather than organization-owned, so there is no project-backing evidence to offset the narrow publishing base.
The registry namespace and repository are both owned by the same user account, and the owner type is User, providing package-to-repository alignment but no organizational handoff capacity.
One contributor made 100% of the commits in the past 3 months, leaving maintenance highly concentrated and increasing continuity risk for this user-owned project.
Only 1 commit was recorded in the past 3 months, indicating very limited recent development activity despite the current release cadence.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 7 action references are unpinned, which weakens build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.0 | — | — |
symfony/config Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/console Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/process Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/http-kernel Version ^6.4 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.