Usable with caveats: it is a mature, licensed package with tests, release notes, and active organizational backing, but no commits or active maintainers were observed in the last three months. Low repository adoption and missing security hardening add smaller concerns.
68%
Total Score
75
100
83
80
The package has existed since January 2018 with 32 releases and a release as recent as March 20, 2026, although only one release occurred in the last 12 months.
No commits and no active maintainers were observed during the last three months. This is a meaningful maintenance concern, although the recent release and non-archived repository partly compensate for it.
There are no open issues or pull requests and no recent issue or pull-request activity. This may reflect stability, but it also provides little evidence of an active community.
The repository has only 4 stars, 4 forks, and 2 watchers, indicating limited adoption and community visibility; popularity is supporting evidence, so this is a smaller concern rather than a standalone failure.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hardening gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.18.3|^3.0 | — | — |
doctrine/doctrine-bundle Version ^1.8|^2.0|^3.0 | — | — |
symfony/event-dispatcher Version ^6.4|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.