The single release and no commits in the last three months leave maintenance uncertain. Clear licensing, tests, documentation, and an unarchived matching repository provide useful support, while four unpinned workflow actions weaken build hygiene.
62%
Total Score
50
50
75
67
The package declares 35 runtime dependencies, including several framework and bundle integrations, creating a relatively broad dependency surface for a 0.0.1 release.
The repository is owned by a user account rather than an organization, so the available ownership signal does not show organizational backing for ongoing maintenance.
The package has only one release, published about 10 months ago, so there is little release history to demonstrate sustained maintenance.
There were no commits and no active maintainers in the last three months, leaving current maintenance capacity uncertain despite the repository remaining available.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external adoption signal.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^3.0 | — | — |
symfony/form Version ^7.3 | — | — |
symfony/yaml Version ^7.3 | — | — |
doctrine/dbal Version ^4.0 | — | — |
symfony/config Version ^7.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.