This is a healthy, transparently maintained release with an MIT license, stable v1.3.1 versioning, a matching repository, documented releases, repository tests, and current repository activity. The organization backing and recent merged pull requests provide meaningful maintenance support, while the main concerns are that only one contributor made commits in the last three months, release activity has slowed to two releases in the last 12 months, and no security policy is published. The package appears reasonable to depend on, with normal dependency and build hygiene, but its recent commit bus factor warrants monitoring.
82%
Total Score
80
100
94
90
Eleven releases over 692 days and two releases in the last 12 months show an established project, although the recent cadence is slower than its historical median interval of about 16 days.
One contributor made all commits in the last three months, creating a concentrated short-term commit bus factor; organization ownership partly compensates because maintenance can potentially be handed off.
Only one commit was recorded in the last three months, which is thin direct maintenance activity even though six pull requests were merged in the last month.
No repository security policy was found, leaving vulnerability reporting guidance less transparent than ideal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2|^3 | — | — |
symfony/process Version ^6.4|^7.0|^8.0 | — | — |
symfony/filesystem Version ^6.4|^7.0|^8.0 | — | — |
symfony/http-client-contracts Version ^3.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.