The package includes a license, tests, release notes, and a matching source repository. Its release cadence has stopped since January 2024, and both workflow actions are unpinned; use it only if this maintenance pace fits your needs.
62%
Total Score
75
93
67
The package has 10 releases since May 2018, but no registry release in the last 12 months and the latest release was January 2024, indicating a long period without published maintenance.
The repository recorded no commits and no active maintainers in the last three months. The recent push shown by repository status provides limited compensation but does not establish ongoing activity.
The repository has no security policy. This is a transparency gap for vulnerability reporting, although it is not evidence that the package is unsafe.
The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its two action references are unpinned, leaving avoidable dependency-integrity hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/lock Version ^6|^7 | — | — |
symfony/config Version ^6|^7 | — | — |
symfony/console Version ^6|^7 | — | — |
symfony/http-kernel Version ^6|^7 | — | — |
symfony/http-foundation Version ^6|^7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.