Tests, a README, clear licensing, and a security policy support adoption. The package is not deprecated or archived, but its small project has limited visible activity and modest ecosystem traction.
62%
Total Score
50
88
75
The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance and abandonment concern despite a later recorded push date.
The repository has 1 star, 0 forks, and 0 watchers, indicating limited public traction. Popularity is supporting evidence rather than a verdict, so this only modestly lowers confidence in broader project support.
Composer is used as the build tool, which fits the package ecosystem. No security scanning tools were detected, leaving a modest process gap, but this alone does not indicate abandonment.
All 11 analyzed action references are unpinned, reducing build reproducibility and increasing exposure to upstream action changes. The audit found no dangerous sinks, high-severity findings, or incomplete workflow analysis, which limits the impact to hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ^5.0 | — | — |
symfony/yaml Version ^5.0 | — | — |
symfony/config Version ^5.0 | — | — |
symfony/routing Version ^5.0 | — | — |
symfony/validator Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.