Usable with caveats: the package is licensed, tested, clearly backed by a matching repository, and not deprecated. However, it has only one release, no commits in the last three months, no security policy, and very little public adoption, so verify that its dependencies and maintenance still fit your project.
58%
Total Score
50
50
75
90
The package declares 28 runtime dependencies, including several framework and related bundle components. This broad dependency surface increases integration and transitive-maintenance burden for a small, early release.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This provides direct ownership alignment without demonstrating a broad institutional maintainer base.
This package has only one release, published about 15 months ago, with no releases in the last 12 months. That leaves its release maturity and ongoing maintenance unproven.
There were 0 commits and 0 active maintainers in the last three months, consistent with a package whose only registry release is already about 15 months old. This is the strongest indication of limited current maintenance.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is not required for a healthy small package, but these figures provide little independent evidence of community review or adoption.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^6.4 || ^7.1 | — | — |
doctrine/dbal Version ^4.0 | — | — |
symfony/config Version ^6.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.