Risky to adopt for new projects: the release line has had no registry releases or repository activity since November 2021, and the linked repository has no recent contributors. It remains licensed, documented, tested, and not archived, but the long abandonment gap is a substantial maintenance risk.
42%
Total Score
38
63
88
The package has 197 historical releases, but its latest registry release was over four years ago and there were no releases in the last 12 months. The long period without releases outweighs the otherwise mature release history.
The repository recorded zero commits and zero active maintainers over the last three months, strongly indicating that maintenance has stopped.
Two registry publishing accounts are listed, but maintainer access records do not demonstrate current maintenance activity. The zero recent commits and releases are stronger evidence of abandonment risk.
The registry namespace and repository owner match, but the project is backed by an individual account rather than an organization. This provides some ownership consistency but limited evidence of ongoing institutional support.
There were no new or closed issues and no pull requests in the measured month, while no pull requests were open. This is consistent with an inactive project, although issue counts are partly unknown.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^5.1 | — | — |
doctrine/orm Version ^2.6,>=2.6.3 | — | — |
symfony/form Version ^4.4|^5.0 | — | — |
symfony/intl Version ^4.4|^5.0 | — | — |
symfony/asset Version ^4.4|^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.