Its Apache-2.0 license, clear README, and organization-backed source improve transparency. As a narrowly scoped type-definition metapackage, its minimal tree and lack of tests are expected.
68%
Total Score
83
100
89
88
This package is brand new, with one release published today and no established release cadence. That limits evidence of sustained maintenance, though it is partly explained by the package's initial-release status.
There were zero commits and zero active maintainers in the last three months. Because the package was released today, this is limited evidence rather than strong abandonment evidence, but maintenance history is not yet demonstrated.
The repository uses Composer, appropriate for this package, but no security scanning tools were detected. For this small metapackage that is a modest hygiene gap rather than a severe concern.
No security policy was found in the repository. This reduces disclosure transparency, although the package is a minimal type-definition metapackage.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/symfony-dotenv-impl Version ~7.4.18.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.