The package includes tests and has no install-time scripts. Its proprietary license may limit reuse for projects expecting open-source terms.
38%
Total Score
50
60
75
The package has had no release in over six years: its latest release was 8 May 2020, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, matching the long release gap and providing no evidence of current maintenance.
The manifest declares a proprietary license, so the release is licensed, but its terms may restrict use or redistribution in projects expecting open-source licensing.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide little additional confidence in ongoing support.
The repository has no security policy. This is a transparency and maintenance gap, although it is secondary to the much longer inactivity concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-kernel Version ^5.0 | — | — |
webchemistry/image-storage Version >= 0.11.10 <1.0.0 | — | — |
symfony/dependency-injection Version ^5.0 | — | — |
webchemistry/image-storage-symfony-bridge Version >= 0.9.2 <1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.