The package includes tests, documentation, a matching MIT license, and no install-time scripts. Missing security scanning and a security policy reduce transparency further for a deployment tool.
45%
Total Score
50
75
83
The package has made no release in about 2 years and 9 months, despite 10 total releases. This strongly lowers confidence that current Symfony and deployment environments will be supported.
The repository has had no commits and no active maintainers in the last 3 months, consistent with the last push being about 2 years and 9 months ago. The repository is not archived, but that does not offset the prolonged inactivity.
The repository has 0 stars and 5 forks, providing little supporting evidence of broad adoption or an active user community. Popularity is not decisive, but it offers no compensation for the inactivity.
Composer build tooling is present, which supports reproducible package management, but no security scanning tools were detected. That is a transparency and maintenance gap for a package used to deploy applications.
The repository has no security policy. This weakens the project's disclosure and response transparency, though it is less serious than the absent maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ~5.0|~6.0|~7.0 | — | — |
symfony/console Version ~5.0|~6.0|~7.0 | — | — |
symfony/process Version ~5.0|~6.0|~7.0 | — | — |
symfony/filesystem Version ~5.0|~6.0|~7.0 | — | — |
symfony/http-kernel Version ~5.0|~6.0|~7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.