This release is usable but carries meaningful maintenance and transparency concerns. The package is MIT-licensed, not deprecated or archived, is backed by an organization-owned repository, has a coherent 25-file Symfony source tree, and uses no install-time lifecycle scripts. However, it has recorded no commits or issue/PR activity in the last three months, only one release in the last 12 months despite being 614 days old, no tests or changelog in either the artifact or repository, no security scanning or security policy, zero observed repository popularity, and a relatively broad runtime dependency set of 13 packages. The recent repository push and organization backing are modestly reassuring, but the evidence supports caution before adopting it as a critical dependency.
56%
Total Score
63
50
72
90
No commits and no active maintainers were observed in the last three months. This is the strongest maintenance concern and indicates possible stagnation, although the latest repository push partially offsets the concern.
The package declares 13 runtime dependencies and no development dependencies. The broad runtime footprint increases maintenance and transitive-dependency exposure, while the absence of dev dependencies also fits with the observed lack of repository tests.
A README exists, but it is only 15 characters and there are no tests or changelog in either the artifact or repository. For a reusable Symfony utility bundle, these omissions reduce transparency and verification confidence.
The package is 614 days old with 17 releases, but only one release occurred in the last 12 months. That indicates substantially slowed release activity, despite the recent latest release.
There are no open issues or pull requests and no issue or pull-request activity in the last month. While this may reflect a small, quiet project, it provides no evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version * | — | — |
symfony/intl Version * | — | — |
doctrine/dbal Version * | — | — |
symfony/serializer Version * | — | — |
symfony/translation Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.