The repository has a clear license, security policy, release notes, and clean workflow audit. Its very short history and single active contributor leave limited evidence of long-term maintenance capacity.
72%
Total Score
80
100
83
100
The package is only 4 days old, with 5 releases and a median interval of about 13 hours. This shows active initial development but provides little evidence of sustained maintenance.
One contributor holds 100% of the 3-month commit activity. Organization ownership provides some handoff capacity, but no second active contributor is shown to demonstrate it.
The repository recorded 12 commits in the last 3 months, all from one active maintainer. The activity is recent, but the narrow contributor base limits maintenance resilience.
Composer build tooling is present, but no security-scanning tool was detected. This is a maintenance and assurance gap rather than evidence of unsafe code.
Version v0.1.4 is not a prerelease, but the package remains below 1.0, so its API and behavior may still change materially.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/mime Version ^8.1 | — | — |
symfony/mailer Version ^8.1 | — | — |
sympress/assets Version ^1.2.1 | — | — |
sympress/kernel Version ^1.1.1 | — | — |
symfony/http-client Version ^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.