The package includes tests, a usable README, an MIT license, and a matching source repository. Its large dependency surface and unpinned workflow actions add maintenance and build-integrity concerns.
58%
Total Score
50
50
75
50
The package declares 61 runtime dependencies, including a broad Symfony, Doctrine, and Tourze stack. This increases upgrade and transitive-risk burden for consumers compared with a narrowly scoped package.
The package and repository share the tourze namespace, but the repository owner is an individual account rather than an organization. This provides a clear ownership match but limited visible backing capacity.
Only two releases were published, both within about 10 hours, and there have been no releases in the last 12 months despite the package being about 16 months old. This indicates limited release maturity and uncertain ongoing maintenance.
There were no commits and no active maintainers during the last three months. Combined with no registry releases in the last year, this is a meaningful sign of stalled maintenance.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a small project, but it offers little evidence of an active maintenance community.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^6.4 || ^7.1 | — | — |
doctrine/dbal Version ^4.0 | — | — |
nesbot/carbon Version ^2.72 || ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.