62%
Total Score
caution
Usable with caveats: no release for about two and a half years and all workflow actions are unpinned.
Only one account has registry publishing access, and the project is user-owned rather than organization-backed; this leaves a thin observed maintainer base if that person becomes unavailable.
The package has 15 releases over about nine and a half years, but it has had no registry release in the last 12 months and the latest release is about two and a half years old.
The repository recorded zero commits and zero active maintainers in the last three months, which is evidence of currently limited maintenance capacity.
The repository has no security policy, reducing transparency about how maintainers handle vulnerability reports; this is a modest gap for a small library.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3 | — | — |
symfony/serializer Version ^5.2|^6|^7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.