Usable with caveats: this is a newly published package with no release or maintenance track record yet. It has a clear README, organization-backed repository, MIT declaration, and no install-time scripts, but its long-term reliability is still unproven and it lacks a security policy.
58%
Total Score
75
93
75
The package is 0 days old with only one release, so there is no evidence yet of sustained maintenance, release quality, or compatibility over time.
There were no commits and no active maintainers in the preceding three months. Because the package was released only today, this is primarily missing track record rather than proof of abandonment, but it still limits confidence.
No security policy was found in the repository, leaving disclosure and response expectations undocumented for a package that handles API credentials and signed URLs.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/cache Version ^8.1 | — | — |
survos/kit-bundle Version ^2.5 | — | — |
symfony/serializer Version ^8.1 | — | — |
symfony/http-client Version ^8.1 | — | — |
symfony/property-info Version ^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.