Notification core bundle
28%
Total Score
unhealthy
Risky: it borrows symfony/cache’s identity and has had no release or commit activity since May 2018.
The package borrows the identity of the far more established symfony/cache, with borrows_lookalike_identity true and no evidence of being a transparent fork; consumers may have intended the lookalike instead.
The latest release was in May 2018, about 8 years and 4 months ago, with no releases in the last 12 months. Eleven total releases show some history, but not current maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release gap and indicating a substantial abandonment risk.
The source repository contains tests, a positive sign for basic project maturity. The missing package README and changelog are transparency gaps for a library, though the tests partly compensate for the missing scaffolding.
Composer build tooling is present, but no security scanning tooling was detected. This modestly reduces maintenance transparency without outweighing the stronger inactivity concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0.1 | — | — |
symfony/config Version ^3.2|^4 | — | — |
symfony/http-kernel Version ^3.2|^4 | — | — |
symfony/dependency-injection Version ^3.2 | — | — |
symfony-bro/notification-core Version ^0.2|^0.3|^0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.