The stable release has clear notes, a README, and no install-time scripts, while organization backing supports continuity. The project has limited visible safeguards and a very small public footprint, so pinning this version is sensible for production use.
68%
Total Score
75
81
75
The repository recorded zero commits and zero active maintainers in the last three months. Although releases and a recent push show some continuity, the current development activity is thin and lowers confidence in active maintenance.
The repository name does not match the package name and its README does not mention the package. This creates some uncertainty that the linked repository is the intended source, even though the package is described as a fork and the organization context is consistent.
The repository has zero stars and forks and only three watchers, indicating a very small public footprint. Popularity is supporting evidence rather than a decisive health measure, but it provides little independent confidence.
Composer is used as the build tool, but no security scanning tools are reported. The standard build tooling is positive; the missing scanning is a modest hygiene gap.
The repository has no published security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence of a security defect by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jms/metadata Version ^2.6 | — | — |
symfony/config Version ^6.4 || ^7.3 || ^8.0 | — | — |
symfony/http-kernel Version ^6.4 || ^7.3 || ^8.0 | — | — |
webfactory/object-routing Version ^1.7 || ^2.0 | — | — |
symfony/dependency-injection Version ^6.4 || ^7.3 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.