Risky to adopt for a new project: the package has had no release or repository commit activity since March 2022, with no tests and very little repository adoption. It is not deprecated or archived and has a usable README, but the long inactivity makes future compatibility and maintenance uncertain.
42%
Total Score
33
50
67
88
The latest release was published on March 1, 2022, and there were no releases in the following 12 months of the observed history. This is a strong sign that the package is no longer actively maintained.
There were zero commits and zero active maintainers in the observed three-month period. Combined with the last push in March 2022, this is the main abandonment concern.
Four runtime dependencies, including Symfony and Doctrine components, indicate meaningful framework coupling. This is not inherently unsafe, but it can increase compatibility work for an old, inactive package.
The registry namespace and repository owner match, and both are associated with the same individual account. This supports basic ownership continuity but does not provide organizational backing.
There are no open issues or pull requests and no recent issue or pull-request activity. While this may mean the project is quiet, it provides no evidence of ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version >=2.5 | — | — |
symfony/symfony Version >=3.4 | — | — |
doctrine/doctrine-bundle Version >=1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.