Its README, tests, release notes, and matching repository provide useful adoption and transparency support. The small audience, absent security scanning, and four unpinned workflow actions leave meaningful maintenance and build-hygiene concerns.
62%
Total Score
50
83
83
Six releases over about 18 months, including two in the last 12 months, show an established release history but a slower recent cadence.
There were no commits and no active maintainers in the past three months, a concrete sign that maintenance may have slowed after the latest release.
The repository has zero stars and forks and only one watcher, showing very limited external adoption; popularity is supporting evidence rather than a verdict.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap.
The repository has no security policy, which weakens vulnerability-reporting transparency for a dependency intended for application projects.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^7.3 | — | — |
symfony/config Version ^7.3 | — | — |
symfony/console Version ^7.3 | — | — |
symfony/http-kernel Version ^7.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.