This is a usable but relatively young Symfony bundle with a clear MIT license, a small and understandable artifact, no install-time scripts, stable releases, and a repository that is not archived and was pushed recently. However, it has only four releases over 168 days, one active contributor with all recent commits, no tests or changelog in either the artifact or repository, no security policy or scanning tooling, and the linked repository neither matches the package name nor mentions the package in its README. These factors create meaningful maintenance, transparency, and package-identity risk, so dependency adoption is reasonable only with appropriate review and monitoring.
62%
Total Score
60
100
67
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-client Version ^6.4|^7.4|8.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.