Clear documentation, tests, licensing, and recent release notes support dependable use. Recent repository work is concentrated in one contributor, though organization backing reduces the handoff risk.
86%
Total Score
83
100
94
100
All three recent commits came from one contributor, creating a concentrated short-term bus factor. Organization backing provides some handoff capacity, so this is a caution rather than a severe abandonment risk.
Composer build tooling is present, but no security-scanning tool was detected. This is a minor transparency gap, offset by the repository's documented security policy.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10877 symfony/json-path is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 7.3.0 - 7.4.11 and 8.0.0 - 8.0.11. | 7.3.0 - 7.4.118.0.0 - 8.0.11 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
symfony/polyfill-ctype Version ^1.8 | — | — |
symfony/polyfill-mbstring Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.