Symfony integration bundle for Model Context Protocol (via php-llm/mcp-sdk)
10%
Total Score
critical
Unfit to use: the package is deprecated and its source repository is archived.
Packagist marks the package abandoned at package scope and explicitly names symfony/mcp-bundle as its replacement. This is a direct indication that new dependencies should not be placed on this package.
Only one release exists, published about 15 months ago, with no releases in the last 12 months. That leaves no evidence of ongoing release maintenance.
There were no commits and no active maintainers in the last 3 months. Combined with the archived repository and abandoned registry status, this indicates maintenance has stopped.
The linked repository is archived, so it is no longer an active maintenance base for this bundle. Its last push was about 14 months ago, reinforcing the abandonment risk.
The repository has no security policy. This is a transparency and maintenance gap, although the stronger abandonment signals already determine the overall assessment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^6.4 || ^7.0 | — | — |
php-llm/mcp-sdk Version ^0.1 | — | — |
symfony/console Version ^6.4 || ^7.0 | — | — |
symfony/routing Version ^6.4 || ^7.0 | — | — |
symfony/http-kernel Version ^6.4 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.