Usable with caveats: the organization-backed repository is active and the package is licensed, but this is a very new release with rapid early publishing and limited demonstrated maturity. The README says the repository provides no concrete code for now, and there is no security policy or scanning configured.
58%
Total Score
100
50
78
90
Ten runtime dependencies, including several related Wexample and Symfony packages, create a relatively broad dependency surface for a young package and increase compatibility maintenance needs.
A readable 3,001-character README is present, but it explicitly says the repository provides no concrete code for now; no tests or changelog are reported, which reinforces the package's early-stage maturity.
The package is only 8 days old with four releases, and the median interval is about 1 hour 53 minutes; this shows active initial publishing but leaves little evidence of long-term stability.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but the package is only 8 days old, so it is not by itself evidence of abandonment.
Composer is used as a build tool, but no security scanning tools are configured. The build setup is present while automated security coverage remains a hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version >=6.2 | — | — |
doctrine/orm Version ^3.0 | — | — |
wexample/symfony-api Version >=5.0.0 | — | — |
wexample/symfony-live Version >=4.0.0 | — | — |
wexample/symfony-forms Version >=6.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.