The MIT license, focused dependencies, clear README, and repository tests support straightforward integration. However, no release in over two years and no recent commits leave maintenance uncertain; six unpinned workflow actions add a smaller reproducibility concern.
62%
Total Score
50
100
92
50
The package has 27 releases since July 2020, but none in the last 12 months; the latest release was over two years ago. This is meaningful evidence of stalled maintenance despite a previously regular release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long gap since the latest release. This lowers confidence in ongoing maintenance.
There were no newly opened or closed issues or pull requests in the last month, while three issues and five pull requests remain open. This is supporting evidence of limited recent activity, though not severe on its own.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear. The gap matters more because recent maintenance activity is absent.
The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, all six action references are unpinned, creating a smaller supply-chain reproducibility concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version >=3.4.3 | — | — |
symfony/form Version ^5.0|^6.0|^7.0 | — | — |
symfony/config Version ^5.0|^6.0|^7.0 | — | — |
symfony/http-foundation Version ^5.0|^6.0|^7.0 | — | — |
symfony/dependency-injection Version ^5.0|^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.