The repository had no commits in the last three months, and only one release appeared in the past year despite 48 releases overall. Clear licensing, documentation, an active unarchived repository, and a security policy provide useful transparency.
62%
Total Score
50
86
83
The package has 48 releases over 391 days but only 1 release in the last 12 months, indicating that current release activity has slowed substantially.
The repository recorded 0 commits and 0 active maintainers during the last three months, which is a meaningful maintenance and abandonment concern for a package still being depended on.
The assessed version is an alpha release, while the profile reports a stable latest major and a 45% recent prerelease share; this makes the release less mature than a stable version.
The single workflow uses a pull_request_target trigger without an untrusted checkout or script injection, but its one action reference is unpinned; this is a minor reproducibility and workflow-hygiene weakness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-kernel Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.