The package includes tests, matching source, a clear Apache-2.0 license, and organization backing. Its single release provides no track record yet, so pin this version and reassess after sustained maintenance activity.
68%
Total Score
75
100
88
75
This package was first released today and has only one release, so there is no historical evidence of sustained maintenance or release reliability.
There have been no commits and no active maintainers in the last three months, although the repository is newly created; this leaves maintenance capacity unproven rather than demonstrating abandonment.
Composer is used as the build tool, but no security-scanning tool was detected; the missing scanner is a modest transparency gap for a package with little history.
The repository has no security policy, reducing the documented path for reporting vulnerabilities, though this is not severe for a small new package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-client-contracts Version 3.7.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.