The bundle includes tests, a clear README, a matching repository, and a confirmed MIT license. Its short release history, limited adoption, absent security policy, and unpinned workflow actions leave meaningful maintenance and build-integrity caveats.
66%
Total Score
50
100
75
75
The registry namespace and repository owner are the same user account, providing consistent ownership context but no organization-level backing.
The package has only two releases over 473 days, with one release in the last 12 months and a median interval of about 161 days. This is limited evidence of sustained maintenance, though the repository was pushed more recently.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little evidence of broad external adoption.
Composer build tooling is present, but no security-scanning tool was detected. That leaves a modest transparency and maintenance gap for a dependency package.
The repository has no security policy. This weakens the project's documented process for receiving and handling vulnerability reports.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^7.3 | — | — |
doctrine/dbal Version ^4.0 | — | — |
symfony/config Version ^7.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.