The package is clearly documented, licensed, and tied to an organization-backed repository. It has no security policy or scanning tooling, so transparency is adequate but not especially strong.
78%
Total Score
75
100
80
75
This is the only release, published 0 days ago, so there is no release track record yet; the package's clear purpose limits how concerning that is.
The repository has 0 commits and 0 active maintainers in the last 3 months, which is expected for a repository created today but leaves ongoing maintenance unproven.
Composer is used as the build tool, but no security scanning tools were detected; the missing scanning is a modest hygiene gap for a small package.
The repository has no security policy. This is a transparency gap, although the package is a small type-definition metapackage with no observed install scripts.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/symfony-serializer-impl Version ~7.4.19.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.