The repository includes tests, a changelog, a clear MIT license, and a useful README. Its single maintainer, missing security policy, and unpinned workflow actions leave limited evidence of long-term upkeep.
62%
Total Score
50
83
50
Only one registry maintainer is listed, and the repository is user-owned, leaving a thin visible maintainer base and some continuity risk.
This package has only one release, published about eight months ago, so there is little evidence of sustained maintenance or release responsiveness.
The repository has zero stars, forks, and watchers. Popularity is not required for a healthy small package, but this provides no supporting evidence of community adoption.
The project uses Composer and Make, but no security scanning tools were detected, leaving a modest repository-hygiene gap.
No security policy is present, so users have no documented disclosure path; this is a transparency gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
predis/predis Version ^2.2 | — | — |
symfony/config Version ^6.4|^7.0 | — | — |
symfony/http-kernel Version ^6.4|^7.0 | — | — |
symfony/http-foundation Version ^6.4|^7.0 | — | — |
symfony/framework-bundle Version ^6.4|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.