The package includes tests, a readme, a security policy, and clear licensing. All 16 workflow actions are unpinned, while the alpha release line and absent recent commit activity weaken confidence in ongoing maintenance.
58%
Total Score
50
83
100
The package is 448 days old with 149 releases, but only 2 releases in the last 12 months; this suggests activity has slowed substantially despite the large historical release count.
The repository recorded 0 commits and 0 active maintainers in the past 3 months, which is a meaningful maintenance and abandonment concern.
This release is a prerelease, while the reported latest version is the stable v3.3.19 line; adopting it carries more compatibility risk than a stable release.
All 4 workflows were analyzed successfully and no dangerous findings were reported, but all 16 referenced actions are unpinned, leaving avoidable build-integrity and reproducibility risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^5.0 | — | — |
symfony/console Version ^5.0 | — | — |
symfony/http-kernel Version ^5.0 | — | — |
netgen/query-translator Version ^1.0.2 | — | — |
symfony/framework-bundle Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.