The MIT license and concise installation documentation make the package straightforward to adopt. Its single workflow uses read-only permissions and passed the audit, though its action reference is not pinned and no security policy is published.
82%
Total Score
75
94
75
No commits or active maintainers were recorded in the last three months, which is a maintenance concern, but the repository was updated for this release and the package had two releases in the last 12 months.
Composer is used for the build, but no security-scanning tools are detected. This is a modest transparency gap rather than evidence of abandonment or unsafe behavior.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear for consumers and maintainers.
The only workflow was fully analyzed, uses read-only permissions, and has no audit findings. Its one action reference is unpinned, creating a minor reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.3 || ^4.0 | — | — |
symfony/config Version ^6.4 || ^7.0 | — | — |
contao/core-bundle Version ^5.3 | — | — |
symfony/http-kernel Version ^6.4 || ^7.0 | — | — |
symfony/security-core Version ^6.4 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.