The release includes tests, a substantial README, and notes for this version. Its broad runtime footprint and absent security policy add operational uncertainty.
67%
Total Score
67
50
93
67
The release declares 70 runtime dependencies, including many PHP extensions and framework components. This broad footprint increases integration and maintenance complexity.
The manifest declares a proprietary license, while the artifact contains MIT license text; the mismatch makes the release's actual terms unclear despite included license files.
The package runs post-install and post-update Composer scripts, increasing installation-time behavior and review requirements compared with a package without lifecycle hooks.
One contributor made 100% of the recent commits. Organization backing provides some handoff capacity, but no second active contributor is shown.
Only 3 commits were recorded in the last 3 months, indicating limited recent development activity despite the recent package release history.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.27.1 | — | — |
nyholm/psr7 Version ^1.8.2 | — | — |
doctrine/orm Version ^3.6.7 | — | — |
symfony/flex Version ^2.11 | — | — |
symfony/form Version 8.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.