Daily usefully tools helpers for Sonata
61%
Total Score
caution
Usable with caveats: nearly two years without a registry release and no commits in the last three months signal slowing maintenance.
The release declares 20 runtime dependencies, including several framework bundles and extensions. That broad dependency surface increases compatibility and maintenance exposure, although it is consistent with the package's feature-rich Symfony integration role.
The package has 9 releases since December 2023, but none in the last 12 months and its latest release was in October 2024, nearly two years ago. This is meaningful evidence of slowing maintenance, despite a previously regular release interval.
The repository recorded 0 commits and 0 active maintainers in the last three months. Its last push was earlier, so this indicates recent inactivity rather than abandonment by itself, but it lowers confidence in ongoing support.
Composer is used for builds, but no security-scanning tools were detected. Build tooling supports reproducibility, while the missing security checks leave a modest process gap.
The linked repository has no security policy. This is a transparency gap for a package with many integrations, though it does not by itself show that security issues are mishandled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^9.11 | — | — |
symfony/mime Version * | — | — |
google/recaptcha Version * | — | — |
psr/http-factory Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.