Usable with caveats: this is a clearly licensed, documented package from an organization-backed repository with tests and no deprecation or install scripts. It is brand new with only one release and no observed commit history yet, while security policy and scanning are absent.
62%
Total Score
67
100
88
75
There is one registry publisher, which limits publishing redundancy, but the repository is backed by the UFO-Tech organization, making a short registry maintainer list less concerning.
This release is the package's only release and the package is 0 days old, so there is no track record yet to demonstrate stability or sustained maintenance.
No commits or active maintainers were observed in the last three months; because the project is newly released, this is more a lack of maintenance history than evidence of long-term abandonment.
The repository uses Make and Composer build tooling, but no security scanning tools were detected, leaving a modest transparency and security-hygiene gap.
The repository has no security policy, so users have no documented security-reporting process; this is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/amqp-messenger Version ^7.2 | — | — |
ufo-tech/component-transport-contracts Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.