The package has tests, an MIT declaration, and no install-time scripts. However, its releases and repository activity stopped in 2020, while the repository has no security scanning and does not clearly match the package name.
38%
Total Score
25
50
75
The package is about 6 years old, with 12 releases but none in the last 12 months; all releases appear concentrated on one date, indicating a long-abandoned release line.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the absence of releases since 2020 and indicating severe maintenance risk.
The package contains tests and the repository also has tests, which supports basic project maturity. It has no README or changelog, leaving consumers with limited documentation, though missing changelogs are normal for published artifacts.
There were no new issues, closed issues, new pull requests, or merged pull requests in the last month. This supports the broader evidence of inactivity, although the open-issue count is unknown.
The repository name does not match the package name, and no README package mention was available. That makes the package-to-source relationship less clear, although name differences can occur for subpackages.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.5 | — | — |
symfony/form Version ^3.1 || ^4.1 | — | — |
symfony/yaml Version ^3.0 || ^4.1 | — | — |
symfony/serializer Version ^3.1 || ^4.1 | — | — |
swiftmailer/swiftmailer Version ^4.2 || ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.