The bundle has clear documentation, a stable release, and no install-time scripts. Its source is lightly exercised, and the licensing mismatch should be clarified before adoption.
67%
Total Score
63
50
88
75
The bundle has 12 runtime dependencies, including framework, database, translation, and HTTP components; this is a meaningful integration surface but not inherently unhealthy.
The manifest declares MIT, while an artifact license file is detected as GPL-2.0; although the artifact and repository contain license files, the mismatch needs clarification.
Only one registry account has publish access, which limits release-account redundancy; the organization-owned repository provides some backing.
All recent commits came from one contributor, creating a concentrated maintenance dependency; organization ownership offers some handoff capacity but no second recent contributor is shown.
Only 1 commit was recorded in the last 3 months, so maintenance activity is present but sparse.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.21 | — | — |
nyholm/psr7 Version ^1.8 | — | — |
doctrine/orm Version ^2 || ^3 | — | — |
twig/cache-extra Version ^3 | — | — |
deeplcom/deepl-php Version ^1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.