The package is well documented, licensed, tested, and has a substantial source tree. Its project is only one day old, with no established commit history or security policy, so long-term maintenance remains unproven.
68%
Total Score
50
100
88
75
The repository is owned by an individual account rather than an organization, so the single registry maintainer does not have organizational backing shown by the collected evidence.
The package is only one day old, despite six releases in that period; this shows active initial publishing but provides no meaningful long-term maintenance evidence.
No commits or active maintainers were recorded in the last three months. Because the project is only one day old, this is mainly missing history rather than proof of abandonment, but maintenance capacity is not yet established.
The repository uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not a severe risk by itself.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented for a package that handles application and database integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.3 || ^4.0 | — | — |
symfony/config Version ^5.4 || ^6.4 || ^7.0 | — | — |
contao/core-bundle Version ^4.13 || ^5.0 | — | — |
symfony/http-kernel Version ^5.4 || ^6.4 || ^7.0 | — | — |
symfony/security-core Version ^5.4 || ^6.4 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.