The package includes a license, documentation, tests, and a substantial source tree. Its one registry maintainer and inability to verify the source repository make long-term support and provenance harder to judge.
55%
Total Score
50
100
80
100
Only one account has registry publish access. This does not prove poor maintenance, but it indicates limited publishing redundancy and a higher bus-factor concern.
The package is about 10 months old with 31 releases, but all releases landed within one day, so the apparent activity does not demonstrate sustained maintenance.
Version v0.10.1 is not a stable-major release, which indicates API or behavior changes may still occur, although it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^4.3.1|^5.0 | — | — |
beberlei/assert Version ^3.0 | — | — |
symfony/console Version ^4.3.1|^5.0 | — | — |
symfony/process Version ^4.3.1|^5.0 | — | — |
symfony/http-kernel Version ^4.3.1|^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.