The MIT license, Symfony organization backing, repository tests, and regular historical releases support maintainability. However, this release is a deprecated 2.x package with no commits or active maintainers in the last three months, so pinning it creates a clear upgrade liability.
42%
Total Score
75
79
100
The included README explicitly marks the package as deprecated in 2.x and says it will be removed in the next major version. Its tests, changelog, and complete documentation provide transparency, but they do not offset the stated removal plan.
The registry does not mark the package as deprecated, but this positive metadata is outweighed by the package README's explicit deprecation notice.
The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with a deprecated component receiving no ongoing development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^5.4|^6.0|^7.0|^8.0 | — | — |
symfony/http-kernel Version ^5.4|^6.0|^7.0|^8.0 | — | — |
symfony/dependency-injection Version ^5.4|^6.0|^7.0|^8.0 | — | — |
symfony/deprecation-contracts Version ^2.5|^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.