This release appears healthy and reasonable to depend on: it is a stable, non-prerelease version from an organization-owned, non-archived repository with recent activity, 41 commits in the last 3 months, tests, a substantial README, and a package structure consistent with a maintained PHP/Sulu bundle. The main limitations are a very concentrated commit distribution, no repository security policy, and workflow permissions that are not explicitly declared; these are transparency and governance gaps rather than evidence of abandonment. Low popularity and the absence of a changelog are modest concerns, but are outweighed by active development, repository/package alignment, and the presence of tests.
84%
Total Score
88
100
89
80
There is only one open issue and one new issue in the last month, with no pull requests; this provides limited evidence about issue responsiveness but does not indicate severe neglect.
Five stars and no forks indicate limited adoption and community validation, but popularity is supporting evidence and does not outweigh the repository's active development and tests.
Composer build tooling is present, but no security scanning tools were detected; the missing security automation is a governance gap without evidence of abandonment.
No repository security policy was found, reducing vulnerability-reporting transparency; this is a hygiene concern rather than a severe health risk.
The sole workflow lacks top-level token permissions, so its permissions are not explicitly constrained in the collected metadata; no top-level write permissions were reported.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sulu/sulu Version ^3.0 | — | — |
nesbot/carbon Version 3.10.* | — | — |
symfony/monolog-bridge Version ^7.3 | — | — |
symfony/monolog-bundle Version ^4.0 | — | — |
friendsofsymfony/rest-bundle Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.