The artifact is substantial, licensed, tested, and backed by an organization with a security policy. Its large dependency surface and absent security scanning add maintenance burden, while the source repository has shown no activity since the sole release.
48%
Total Score
100
72
100
Only one release exists, published nearly four years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained release path.
The repository has 0 stars and 0 forks, with only 2 watchers. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of an active user or contributor community.
Composer build tooling is present, but no security scanning tools were detected. For an authentication and identity package, that is a meaningful transparency and maintenance gap.
The repository is not archived, which avoids the strongest abandonment signal, but it was last pushed at the time of the sole release nearly four years ago.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ~1.0 || ~2.0 | — | — |
symfony/yaml Version ^3.4 || ^4.0 | — | — |
symfony/config Version ^3.4 || ^4.0 | — | — |
gettext/gettext Version ^4.6 | — | — |
symfony/routing Version ^3.4 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.