Tests, release notes, and a matching repository improve confidence, while the large runtime dependency set adds maintenance burden. The package remains an early-stage component with limited recent development evidence.
60%
Total Score
50
50
78
75
The package declares 27 runtime dependencies, including several framework and integration bundles. That broad dependency surface increases upgrade and compatibility burden.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This offers limited evidence of institutional maintenance capacity.
The package is about 512 days old with four releases, but only one release appeared in the last 12 months. This indicates limited ongoing release activity.
There were zero commits and zero active maintainers in the last three months. This is meaningful evidence of currently weak maintenance activity, despite the repository not being archived.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these figures provide little external evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^7.3 | — | — |
doctrine/dbal Version ^4.0 | — | — |
symfony/config Version ^7.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.