The project includes clear documentation, release notes, tests in the repository, and active security tooling. Recent commit activity is absent and all four workflow actions are unpinned, while the missing security policy reduces transparency; organization backing and a recent stable release partly offset this.
68%
Total Score
50
50
94
75
There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has currently paused despite the recent stable release.
The package declares 18 runtime dependencies, including core Symfony and PHP tooling components; this is a substantial dependency surface but fits an object mapper integrated with Symfony.
Only one registry account has publish access, which creates concentration risk, but the project is organization-backed and observed activity provides additional context.
The package has 82 releases over about 2 years and 8 months, but only one release in the last 12 months; the long history is reassuring while the recent cadence is slow.
The repository has one open issue and five open pull requests, showing ongoing contribution demand, though no pull requests were merged in the last month.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 | — | — |
symfony/cache Version ^7.0 || ^8.0 | — | — |
symfony/clock Version ^7.0 || ^8.0 | — | — |
symfony/config Version ^7.0 || ^8.0 | — | — |
symfony/finder Version ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.