It has a focused artifact, tests, organization backing, and matching Apache-2.0 licensing. Pin the version and reassess after it builds a longer release and maintenance history.
64%
Total Score
75
86
100
This is the package's first release, published within the last day, so there is no release track record or cadence yet. That materially limits confidence in its maturity.
The repository shows zero commits and zero active maintainers in the last 3 months, although its initial push was observed recently. The lack of history is a meaningful maintenance concern for a new dependency.
Composer is used as the build tool, which fits the package ecosystem. No security-scanning tool was detected, a modest repository hygiene gap that is outweighed by the package's tests and licensing evidence.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/doctrine-bridge Version 7.4.17 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.