Symfony starter with React + TypeScript via Inertia.js, with SSR
64%
Total Score
caution
A well-documented starter with tests, but it is brand new, maintained by one contributor, and uses unpinned workflow actions.
The starter declares 30 runtime dependencies, including framework, authentication, database, and frontend-integration components. That breadth is consistent with its full-stack starter role but creates a substantial maintenance surface.
The package uses post-create, post-install, and post-update Composer scripts. These are expected for a create-project starter that sets up secrets, databases, and fixtures, but they increase installation complexity.
The registry namespace and repository are owned by the same individual account. This confirms ownership alignment but provides no organizational maintenance capacity to offset the single-contributor risk.
The package is brand new, with four releases published within the same day and no longer-term release history. This gives little evidence about sustained maintenance.
One contributor made all 21 commits in the last three months, leaving no demonstrated backup maintainer and increasing abandonment risk if that person becomes unavailable.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^2.12|^3.30 | — | — |
doctrine/orm Version ^3.7 | — | — |
symfony/flex Version ^2 | — | — |
symfony/yaml Version 8.1.* | — | — |
symfony/dotenv Version 8.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.