The package is clearly scoped as a Composer metapackage and has a matching organization-owned repository. Its Apache-2.0 licensing and lack of install scripts are reassuring, but there is not yet enough history to establish long-term maintenance.
72%
Total Score
75
100
88
88
The package is 0 days old with only 2 releases, both published within roughly 14 minutes, so there is little evidence of sustained maintenance or release maturity.
There were 0 commits and 0 active maintainers in the last 3 months. Because the repository is newly created, this is mainly an absence of track record rather than evidence of abandonment.
Composer build tooling is present, but no security scanning tools were detected; for this tiny metapackage that is a modest hygiene gap, not a severe dependency risk.
The repository has no security policy. This reduces disclosure transparency, though the package's narrow metapackage scope limits the practical impact.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/symfony-clock-impl Version ~8.1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.