The artifact is easy to inspect and includes tests, a README, release notes, and no install-time scripts. Treat it as a frozen starting point rather than a maintained dependency, and verify its PHP/Symfony stack before use.
48%
Total Score
81
75
The package has only two releases, with the latest on January 19, 2021 and none in the last 12 months. This long period without releases is a meaningful maintenance concern for a dependency.
The project uses Make and Composer, showing basic build structure, but it reports no security scanning tools. For a Docker and PHP template, that is a modest maintenance and hygiene gap.
The repository is not archived, which avoids a severe abandonment signal, but its last push was January 20, 2021 and reinforces the stale release history.
The repository has no security policy. This reduces transparency for reporting and handling issues, although it is not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.