Risky to adopt without accepting maintenance risk. The package has had only two releases, with no release in about 15 months and no recent commits, while its one-person ownership and lack of security policy provide little evidence of ongoing support.
48%
Total Score
33
50
88
83
The repository had zero commits and zero active maintainers in the last three months, consistent with the roughly 15-month release gap. This is the strongest evidence that maintenance may have stalled.
The bundle declares ten runtime dependencies, including several Symfony UX, form, asset, and validation components. This is a relatively broad integration surface for a small bundle and can increase compatibility and maintenance burden, though the dependencies fit the package's stated Symfony functionality.
Only one registry account, Plixus, has publishing access. The matching repository ownership provides some continuity, but it still leaves a thin maintainer base if that person becomes unavailable.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. The matching ownership supports authenticity, while the individual backing limits demonstrated support capacity.
Only two releases exist, both published within about two days, and there has been no release in about 15 months. The focused package may be mature enough for its scope, but the long release gap is a meaningful maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ^6.4|^7.0 | — | — |
symfony/asset Version ^6.4|^7.0 | — | — |
symfony/validator Version ^6.4|^7.0 | — | — |
symfony/twig-bundle Version ^6.4|^7.0 | — | — |
symfony/asset-mapper Version ^6.4|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.