Tool to validate fluid components based on a specified ruleset
68%
Total Score
75
86
50
The package has 10 releases since July 2020, but no releases in the last 12 months and its latest release was April 10, 2025. This indicates slowing maintenance rather than abandonment by itself.
There were no commits and no active maintainers in the last three months. This is consistent with the quiet release history and raises maintenance risk, although it does not establish abandonment alone.
The repository uses Composer, but no security scanning tools were detected. For a small CLI this is a modest transparency and hygiene gap, not a severe dependency risk.
The repository has no security policy. That leaves vulnerability reporting and response expectations unclear, lowering transparency for consumers.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 6 action references are unpinned. The lack of a top-level permissions block is acceptable here because the workflow does not request top-level write access.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^5.0 || ^6.0 || ^7.0 | — | — |
symfony/console Version ^5.0 || ^6.0 || ^7.0 | — | — |
typo3fluid/fluid Version ^4.0 || ^2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.