The package includes a clear README, tests, and a matching source repository. Its workflow leaves one action unpinned, and no security scanning or policy is present.
68%
Total Score
50
88
50
The repository recorded no commits and no active maintainers in the last three months, which raises a maintenance concern despite the recent release history.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a package used in application testing.
Version 0.7.2-alpha is still a prerelease, and every recent release is marked prerelease, so compatibility expectations remain less certain.
The single analyzed workflow has no untrusted trigger or audit findings, but its only action reference is unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version * | — | — |
symfony/browser-kit Version * | — | — |
symfony/css-selector Version * | — | — |
typo3/testing-framework Version ^8.2 | — | — |
symfony/http-client-contracts Version ^3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.