The repository includes a substantial README, tests, a matching source tree, and a clear MIT license. Organization backing and active publishing help, but consumer adoption and security-process evidence remain limited.
68%
Total Score
100
75
88
The package is only 2 days old, with 8 releases clustered in that period. This shows active initial publishing but provides little evidence of sustained maintenance or release stability.
The repository has no stars, forks, or watchers. Because the project is only 2 days old, this is weak adoption evidence rather than strong abandonment evidence.
Composer build tooling is present, but no security scanning tool was detected. This leaves a modest transparency and maintenance-process gap.
The repository has no security policy. For a bundle that handles AI providers, database queries, and application integration, the missing reporting process is a real transparency gap.
Version 1.0.0-rc.4 is still a prerelease, and all recent releases are prereleases. That limits confidence in compatibility and production stability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^3.2 | — | — |
symfony/form Version ^7.1 | — | — |
symfony/lock Version ^7.1 | — | — |
symfony/yaml Version ^7.1 | — | — |
doctrine/dbal Version ^3.8|^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.