The release is documented, tested, and MIT-licensed, while the project remains unarchived. Its old Symfony-era dependency set makes a maintained alternative or compatibility check preferable.
44%
Total Score
0
71
75
The latest release was published in October 2019, nearly 7 years ago, with no releases in the last 12 months. This strongly raises abandonment and compatibility risk despite the package's six-release history.
The repository has had zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating no current maintenance capacity.
The repository has only 3 stars and 1 fork. Popularity is supporting evidence rather than a verdict, but this small footprint provides little external confidence or maintenance resilience.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, particularly relevant for a dependency with no recent maintenance evidence.
The assessed version is still marked as a release candidate, and recent releases are predominantly prereleases. That reduces maturity and makes it a weaker default dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^4.3 | — | — |
symfony/config Version ^4.3 | — | — |
symfony/finder Version ^4.3 | — | — |
symfony/console Version ^4.3 | — | — |
symfony/filesystem Version ^4.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.