Manage features and plans in your Symfony app.
58%
Total Score
38
88
67
The repository recorded zero commits and zero active maintainers in the last three months, which is meaningful abandonment risk for a library dependency.
The package runs post-install and post-update Composer scripts, which increase installation complexity and deserve attention even though no harmful behavior is shown here.
Only one account has registry publish access. The linked repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset the thin publishing base.
The registry namespace and repository owner differ, and the repository owner is an individual rather than an organization, providing limited evidence of institutional backing.
The package has 50 releases since July 2020, but no releases in roughly 18 months, indicating that publishing activity has stalled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.5 || ^3.0 | — | — |
symfony/form Version ^4.4|^5.4|^6.0|^7.0 | — | — |
doctrine/common Version ^2.5 || ^3.0 | — | — |
symfony/routing Version ^4.4|^5.4|^6.0|^7.0 | — | — |
symfony/translation Version ^4.4|^5.4|^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.