The package includes a useful README, release notes, security scanning, and a recent repository update. Its small audience and limited recent activity leave less evidence of sustained maintenance, while the workflow uses four unpinned actions.
68%
Total Score
67
92
50
The package has existed for over three years and released twice in the past 12 months, but the roughly five-month median interval indicates a modest maintenance cadence.
All recent commits came from one contributor, creating concentration risk; organization ownership provides some capacity to hand maintenance off but does not demonstrate a second active contributor.
Only one commit was recorded in the past three months, showing limited recent implementation activity despite the recent release.
The repository has no security policy, leaving vulnerability reporting and response expectations less transparent for a package integrated into Sulu applications.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sulu/sulu Version ^2.6 | — | — |
symfony/config Version ^5.0 || ^6.0 | — | — |
symfony/http-kernel Version ^5.0 || ^6.0 | — | — |
symfony/http-foundation Version ^5.0 || ^6.0 | — | — |
symfony/framework-bundle Version ^5.0 || ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.