The README, tests, release notes, matching repository, and MIT license provide a solid basis for adoption. Maintenance has gone quiet recently, while broad dependencies, no security policy, and unpinned workflow actions add ongoing risk.
62%
Total Score
50
50
94
75
The package declares 35 runtime dependencies, including substantial Symfony, Doctrine, and EasyAdmin components; this increases upgrade and compatibility exposure.
The package and repository are owned by the same individual account, which provides consistent ownership but not the redundancy of organization backing.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently quiet maintenance despite the recent push history.
Composer build tooling is present, but no security-scanning tool was detected, leaving a repository hygiene gap.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^7.3 | — | — |
yiisoft/json Version ^1.0 | — | — |
doctrine/dbal Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.