Healthy and suitable to depend on, with a clear source repository, regular releases, and a stable current version. The main caveat is that the repository shows no commits or issue activity in the last three months and has no security policy.
78%
Total Score
75
94
75
There were 0 commits and 0 active maintainers in the last three months, despite a recent release. This indicates a recent pause in source activity and is the main maintenance caution, though the longer release history is reassuring.
Composer is used as a build tool, but no security-scanning tools were detected. The missing scanning automation lowers transparency somewhat, while the absence of build tooling itself is not a concern.
The repository has no security policy. For a maintained PHP extension this is a genuine disclosure-process gap, although it does not by itself indicate abandonment or unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 || 2.0 || ^3.0 | — | — |
twig/twig Version ^3.21 | — | — |
doctrine/dbal Version ^3.3 || ^4.3 | — | — |
symfony/config Version ^6.4 || ^7.3 | — | — |
symfony/console Version ^6.4 || ^7.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.