This release is usable but carries meaningful transparency and maturity concerns. It is a stable, non-deprecated package with frequent recent releases, a clear README, a small runtime dependency set, and no install-time lifecycle scripts. However, it is only 132 days old, releases are occurring at a very high cadence, the manifest declares a proprietary license without a license file, and the artifact contains no tests or changelog. With no linked source repository, repository-level maintenance and provenance cannot be verified, so adopting it warrants additional diligence and a willingness to accept higher maintenance and licensing risk.
62%
Total Score
50
70
75
The package declares five runtime dependencies, all directly relevant PHP or Symfony components, and no development dependencies; the runtime surface is moderate, though the absence of dev dependencies limits visible testing and development metadata.
The manifest declares a proprietary license and no license file was included, which creates a meaningful licensing and transparency concern for a package described as open source.
The package has a compact, coherent 14-file tree centered on the bundle implementation, which is reasonable for a focused Symfony bundle, but its small artifact provides limited evidence of broader project maturity.
The artifact includes a substantial README, but it contains no tests and no changelog; with no repository evidence showing those gaps are covered elsewhere, this weakens verification and release transparency.
The package is young at 132 days but has 16 releases, including 14 in the last 12 months; the roughly 20-minute median release interval indicates active publishing but an unusually high cadence that may reduce confidence in release discipline.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/messenger Version ^4.4|^5.0|^6.0|^7.0 | — | — |
symfony/http-client Version ^4.4|^5.0|^6.0|^7.0 | — | — |
symfony/http-foundation Version ^4.4|^5.0|^6.0|^7.0 | — | — |
symfony/framework-bundle Version ^4.4|^5.0|^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.