The package includes tests, documentation, a clear MIT license, and Psalm checks. Its small audience and single publisher are less concerning than the lack of recent releases or commits, while the README warns that it is not production-ready.
55%
Total Score
67
88
50
There have been no releases in the last 12 months, and version 0.0.7 was published about two and a half years ago. The short historical release intervals do not compensate for the extended current inactivity.
The repository recorded zero commits and zero active maintainers in the last three months. This supports the broader evidence of stalled maintenance.
Two issues remain open, with no new or closed issues and no pull-request activity in the last month. This is modest evidence of limited ongoing project activity.
The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, though it is not evidence of a vulnerability itself.
The package remains on major version 0 and its README describes it as a pre-release that is not ready for production, indicating a meaningful compatibility risk despite the registry not marking this exact version as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^6.3 | — | — |
symfony/validator Version ^6.3 | — | — |
symfony/http-kernel Version ^6.3 | — | — |
symfony/framework-bundle Version ^6.3 | — | — |
symfony/dependency-injection Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.