The MIT license, release notes, repository tests, and organization backing improve transparency. The package remains experimental and pre-1.0, so its thin recent activity and workflow hygiene deserve extra care.
64%
Total Score
63
50
81
50
The package has 22 runtime dependencies, including substantial Doctrine, Symfony, and Sulu components. This is a broad integration surface and adds upgrade coupling, but is plausible for a content bundle.
One contributor made all commits in the last 3 months. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.
Only one commit was recorded in the last 3 months, indicating thin recent maintenance despite the recent release and repository push.
There were no new or closed issues and no new pull requests in the last month, although one pull request was merged. This suggests limited current interaction rather than complete inactivity.
The repository name does not match the package name and its README does not mention the package, creating some uncertainty that the linked repository is the intended source.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sulu/sulu Version ^2.5.6 || ^2.6@dev | — | — |
ramsey/uuid Version ^3.8 || ^4.0 | — | — |
doctrine/orm Version ^2.5.3 | — | — |
symfony/config Version ^5.4 || ^6.0 || ^7.0 | — | — |
symfony/workflow Version ^5.4 || ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.