The project has organization backing, a stable major release, and a long release history. Install-time scripts and no recent commits warrant checking the release contents and pinning this version.
68%
Total Score
75
94
83
The package runs post-install and post-update Composer scripts, which are common for Symfony Flex projects but increase installation-time behavior that consumers should understand.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern despite the recent release.
Composer build tooling is present, but no repository security-scanning tool was detected; this is a modest transparency gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/flex Version ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.