This release is usable but carries meaningful transparency and maturity concerns. It has a permissive MIT declaration, no deprecation status, no install-time lifecycle scripts, and a substantial release history for its 89-day age, including 50 releases in the last 12 months. However, it remains below a stable major version, releases are extremely frequent, the artifact has no README, and no source repository was declared, preventing verification of repository maintenance, contributors, issue activity, and build practices. The package also has 18 runtime dependencies, increasing dependency-management complexity. Adoption is reasonable with review and monitoring, but the available evidence does not support treating it as a mature, well-transparently-maintained dependency.
62%
Total Score
50
50
70
75
The package declares 18 runtime dependencies, including framework, ORM, security, and rate-limiting components. This is a substantial dependency surface that increases transitive update and compatibility management burden, although it is consistent with a feature-rich Symfony security bundle.
The registry lists one account with publish access. This does not establish actual maintenance activity, but it provides little administrative redundancy if the publisher becomes unavailable; repository activity signals were not available to compensate.
The complete 26-entry tree shows conventional Symfony source, configuration, templates, a changelog, and a tests directory, providing evidence of a coherent package artifact. The tests directory contains only .gitkeep, so there is limited evidence of substantive packaged test coverage.
The artifact contains tests and a changelog, which provide useful maintenance and release context, but it has no README. The missing README is a transparency and usability gap, though the other scaffolding partially compensates for it.
The package is 89 days old with 54 releases, including 50 in the last 12 months, and a median release interval of about 1.8 hours. This indicates active publishing, but the very short history and unusually rapid cadence provide limited evidence of long-term maturity and may indicate churn.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^8.1 | — | — |
doctrine/orm Version ^3.6.7 | — | — |
symfony/form Version ^8.1 | — | — |
doctrine/dbal Version ^4.4.3 | — | — |
symfony/console Version ^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.