The repository includes tests, a README, and recent source activity. Its proprietary licensing, install scripts, and unclear repository match add adoption and maintenance uncertainty.
58%
Total Score
75
50
67
50
The manifest declares a proprietary license, with no detected license text or license file, which creates a significant reuse and dependency-policy concern.
The package declares 79 runtime dependencies, making the starter kit broad and operationally complex; that raises maintenance exposure but is partly expected for a full Symfony application scaffold.
The package runs post-install and post-update scripts, adding installation-time behavior that increases review and reproducibility concerns.
There have been 20 releases since January 2023, but none in the last 12 months; this suggests the release cadence has stopped despite a recent last release.
There are no open issues or pull requests, and no recent issue or pull-request activity; this is neutral for a quiet starter project but provides little evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^2.12|^3.0 | — | — |
league/csv Version ^9.8 | — | — |
nyholm/psr7 Version ^1.0 | — | — |
symfony/uid Version 7.3.* | — | — |
doctrine/orm Version ^2.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.