The package is clearly scoped and straightforward to integrate. The repository includes tests, a changelog, and an MIT license, with no install-time scripts. Its last release and commit were nearly five years ago, so current maintenance cannot be confirmed.
58%
Total Score
67
93
100
The package has 16 releases over more than 11 years, but its latest release was January 4, 2022, with no releases in the last 12 months. This is substantial evidence of stagnation for a dependency that may need ecosystem updates.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release since January 2022. This materially raises abandonment risk.
There were no new or merged pull requests and no new or closed issues in the last month. With no recent commits, this reinforces the evidence that active maintenance has stopped.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^5.4 || ^6.0 | — | — |
jms/serializer-bundle Version ^4.0 | — | — |
symfony/framework-bundle Version ^5.4 || ^6.0 | — | — |
symfony/dependency-injection Version ^5.4 || ^6.0 | — | — |
simple-bus/asynchronous-bundle Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.