68%
Total Score
caution
A brand-new release with all recent commits from one contributor and no security policy carries real maintenance risk.
This package is brand new, with 3 releases over less than a day; that shows active initial publishing but provides no long-term maintenance history.
One contributor made all 9 commits in the last 3 months, leaving a low individual bus factor; organization backing partly offsets the handoff risk but does not remove it.
Composer build tooling is used, but no security scanning tools are reported, limiting automated assurance for a package with many runtime dependencies.
The repository has no security policy, reducing transparency about how users should report vulnerabilities and how maintainers handle them.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.21 | — | — |
symfony/form Version ^7.4 | — | — |
doctrine/dbal Version ^3.7 || ^4.3 | — | — |
symfony/asset Version ^7.4 | — | — |
symfony/config Version ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.