Symfony integration for authoring and publishing Story Contract exhibit stories.
67%
Total Score
caution
A brand-new v0.2 package has six same-day releases and an explicitly aspirational feature set, though its repository is active and organization-backed.
Six runtime dependencies, including several related Survos and Symfony packages, create meaningful project coupling for consumers. The dependency set is still coherent with the bundle’s stated integration role.
The package is 0 days old and all six releases were published on the same day, so there is not yet evidence of a sustained release pattern.
No repository security policy was found, leaving disclosure guidance undocumented. This is a transparency gap, but it is less serious for a brand-new, small package than evidence of abandoned maintenance or unsafe release behavior.
v0.2.0 is not a prerelease, but the 0.x major version signals an early API and project maturity stage.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
survos/kit-bundle Version ^2.5 | — | — |
survos/folio-bundle Version ^2.37 | — | — |
survos/data-contracts Version ^2.36 | — | — |
survos/harvest-bundle Version ^2.38 | — | — |
symfony/framework-bundle Version ^6.4 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.